Messaging  clues  IBM  to  detail  Lotus  Notes  directions  at 

Lotusphere,  while  Microsoft  unfurls  Exchange  road  map.  PAGE  12. 


Better  blades  Vendors  of  streamlined  servers  are 
focusing  on  systems  management  PAGE  24. 
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Fresh  air,  the  smell  of  ripe  grapes  and  the  craft  of  winemaking  per¬ 
suaded  high-tech  marketing  guru  Ross  Halleck  to  buy  a  vineyard  in 
California's  Napa  Valley. 


No  rat  race,  no  sour  grapes 

Net  industry  veterans  savor  switch  to  wine  making. 

■  BY  JOHN  COX 

III  t’s  hard  to  love  enterprise  software.”That’s  half  the  rea- 
I  son  why  so  many  network  industry  veterans  seem  to 
il  end  up  squinting  into  the  California  sun,  weighing  a 
handfui  of  stony  soil, standing  between  rows  of  grapes.The 
other  half  is  that  “wine  is  one  of  those  things  that  sort  of  gets 
under  your  skin.” 

So  says  Ross  Halleck,  owner  of  1-acre  Halleck  Vineyards  in 
Sebastopol. 

Before  subjecting  himself  to  a  life  in  agriculture,  he  was 
founder  of  Halleck,  Inc.,  one  of  the  best-known  Silicon  Valley 
marketing  services  firms.  He  helped  launch  three  early  releases 

See  Winery,  page  53 


ADICoGiving  IT  departments  the  power  of 
Intelligent  Storage  solutions. 


Ford  to  cut  cord 
on  8,000  phones 
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Ford’s  Jeff  Lemmer  is  migrating 
8,000  product  development 
employees  from  wireline  to 
wireless  phones. 

PHOTO:  DWIGHT  CENDROWSKI 


■  BY  DENISE  PAPPALARDO 

Ford  is  expected  to  announce 
today  that  it  is  replacing  the  tradi¬ 
tional  wireline  phones  of  8,000 
employees  in  its  product  devel¬ 
opment  department  with  wireless 
phones  from  Sprint. 

The  move,  believed  to  be  the 
largest  of  its  kind,  continues  a 
trend  that’s  well  underway  in  the 
consumer  world  but  just  getting 
started  in  corporate  America: 
Businesses  are  eliminating  some, 
or  all,  of  their  wireline  desktop 
phones  in  favor  of  going  all-wire¬ 
less,  all  the  time. 

“It’s  really  about  mobility”  says 
Jeff  Lemmer,  IT  manager  of  tele¬ 
com  services  at  Ford.  Product  de¬ 
velopment  “is  a  group  that  tends 


to  physically  move  around  a  lot.  It 
is  real  important  from  a  commu¬ 
nication  standpoint  that  they  are 
able  to  interact  openly  and  freely 
with  each  other” 

Experts  say  that  all-wireless  is 


not  yet  a  common  choice  —  or 
necessarily  the  best  one  —  for  all 
corporate  customers.  Wireless 
minutes  can  cost  up  to  10  cents 
more  per  minute  than  wireline. 

See  Ford,  page  16 


The  rush  is  on  to 
virtualize  servers 


■  BY  JENNIFER  MEARS  AND 
DENI  CONNOR 

While  VMware  pretty  much  cre¬ 
ated  the  virtual  machine  market 
on  x86  servers  and  has  enjoyed  a 
nearly  uncontested  leadership 
position,  enterprise  customers 
this  year  will  find  a  wider  variety 
of  options  for  virtualizing 
servers,  operating  systems  and 
applications. 

Vendors  such  as  Microsoft  and 
SWsoft  and  the  open  source  vir¬ 
tualization  project  Xen  are  offer¬ 
ing  alternatives  to  VMware  as  in¬ 


terest  in  the  technology  grows.  In 
addition,  start-up  companies, 
such  as  Qlusters  and  Akimbi 
Systems,  are  attacking  other  areas 
of  virtualization  with  tools  to  cre¬ 
ate  high-availability  clusters  or  to 
enhance  applications  running  on 
top  of  virtualized  environments. 

As  x86  processors  become  in¬ 
creasingly  powerful,  customers 
are  looking  for  ways  to  get  more 
out  of  the  low-cost,  standards- 
based  platforms  they  have,  ana¬ 
lysts  say.  Virtual  machine  tech¬ 
nology,  which  creates  isolated 
See  Virtualization,  page  14 


Vulnerability  alerting 
services  sound  the  bell  and 
prioritize 
the  threats 
to  give  you 
a  leg  up. 

We  test  seven  service.* 
for  45  days  to  see 
which  one  earns  our 
Clear  Choice  award. 
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Sizzling  performance.  Refreshing 
is  hot  and  cool  at  the  same  time. 
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News 

■  8  ICANN  accepts  four  bids  to  operate  .net  registry 


features 


■  8  Broadcom  chip  could  bring  lower-cost 
WLAN  switching  gear. 


CLEAR  CHOICE  <9 


Vulnerably  alerting  services 


■  10  Sun  readies  compliance  software. 

■  10  Symantec  rolling  out  anti-spam/anti-virus  appliances. 

■  10  Oracle  airs  PeopleSoft  integration  plan. 


TEST 


specific  network. 
Service  emerged 


Vulnerability  alerting  services  can  be  a  major  time-saver  for  busy  IT  execs.  These  services 
sort  through  the  daily  barrage  of  alerts,  and  give  you  a  priority  list  tailored  to  your 
We  signed  up  for  seven  services  and  at  the  end  of  45  days,  Symantec’s  DeepSight  Alert 
as  our  ClearChoice  winner,  with  Cybertrust’s  Alert  Manager  a  close  second,  Page  39. 


■  12  Notes  faithful  expecting  clear  picture  from  IBM. 

■  12  Microsoft  lays  out  Exchange  road  map. 

■  14  BMC  glues  together  mgmt.  apps  with  common  database. 


Microsoft  Operations  Manager  2005 

Microsoft  Operations  Manager  2005  is  a  solid  tool  for  analyzing  Windows-based  server  problems,  Page  42. 
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10G  offerings. 
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back-up  software. 
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the  mailbag. 

Management 

Strategies 

■  44  IT  hiring  inches  upward: 
Companies  cautiously  seek  to 
increase  IT  staff  with  network, 
security  and  business  skills. 
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Breaking  News 


Go  online  for  breaking  news  every  day.  DocFinder:  6342 


Available  only  on  Fusion 

Know  a  cool  start-up? 

Nominate  your  favorite  corporate  newbie  as  a  start-up  to  watch 
for  '05.  We’ll  publish  our  annual  list  of  10  in  the  Network  World 
200  Issue,  coming  April  25.  DocFinder:  5437 

Patch  Management  Buyer's  Guide 

Our  online  Buyer's  Guide  features  the  latest  patch  management 
information  on  24  products  from  21  vendors.  Check  out  the  latest 
offerings  and  get  your  research  done  here.  DocFinder:  5438 

Network  World  Radio  Podcasts 

Get  the  inside  scoop  on  hot  technology  issues,  such  as  inexpen¬ 
sive  servers,  WiMAX,  network  security  design  and  more.  If  you're 
not  into  Podcasting,  stream  the  sessions  to  your  desktop  or 
download  them  as  MP3s.  DocFinder:  5334 

This  week  at  Network  Lifer.  The  Expert's 
Guide  to  the  Connected  Home 

Every  day,  Network  Life  offers  everything  you  need  to  know  to 
keep  your  —  and  your  family's  and  friends'  —  home  network 
humming.  Get  the  latest  news,  opinions,  reviews,  how-tos 
and  more.  DocFinder:  4838 

Case  studies 

Learn  best  practices  from  your  peers  to  make  the  most  of 
technology,  save  money  and  streamline  your  business. 

DocFinder:  5439 

Network  World  Fusion  Radio:  Inside  a 
security  alert  service 

Thor  farholm,  senior  security  researcher  at  PivX,  provides  an 
inside  look  at  how  threat  data  is  gathered,  verified  and 
disseminated  to  customers.  DocFinder:  5447 

Free  e-mail  newsletters 

Sign  up  for  any  of  more  than  50 
newsletters  on  key  network  topics. 

DocFinder:  6343 


Online  help  and  advice 

Nutter's  Help  Desk 

Securing  a  network  with  VLANs 

Help  Desk  Guru  Ron  Nutter  recommends  a  virtual  LAN  for  a  reader 
who  needs  to  control  server  access  and  manage  mobile  users. 

DocFinder:  5440 

Security  Chief 

Hacker  wars 

Deb  Radcliff  talks  about  hacker  community  reaction  to  her  interview 
with  reformed  hacker  Geoff  Shivley:  "It’s  been  a  few  years  since  any¬ 
thing  I  wrote  set  off  any  kind  of  hacker  sparring." 

DocFinder:  5441 
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Home  LAN  Adventures 

New  networked  media  players  debut  at  GES 

Keith  Shaw  examines  products  that  tout  protection  for  premium 

Internet  content  and  HD  support. 

DocFinder:  5442 

Small  Business  Tech 

Ready  or  not,  VoIP 

Columnist  James  Gaskin  on  why  you'll  soon  use  two  types  of  Internet 
telephony. 

DocFinder:  5443 

Telework  Beat 

Telework  and  home  networks  —  the  real  threat 
Net.Worker  Managing  Editor  Toni  Kistner  looks  at  the  Pew  study, 
fueling  her  paranoid  musings  on  the  future. 

DocFinder:  5446 
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Powell  stepping  down  as  FGC  chairman 

■  Michael  Powell,  chairman  of  the  FCC  for  the  past  four  years, 
announced  Friday  he  will  resign,  effective  sometime  in  March.  A 
Republican  who  championed  telecom  deregulation,  Powell  sent  a 
letter  of  resignation  to  President  Bush  saying  his  resignation  comes 
with  a  “mixture  of  pride  and  regret.  Having  completed  a  bold  and 
aggressive  agenda,  it  is  time  for  me  to  pursue  other  opportunities 
and  let  someone  else  take  the  reins  of  the  agency?  Bush  will  nomi¬ 
nate  a  new  commissioner  and  chairman.  During  his  tenure,  Powell 
pushed  the  commission  to  scrap  many  of  the  rules  requiring  in¬ 
cumbent  telephone  carriers  —  often  called  the  regional  Bells  — to 
share  parts  of  their  networks  with  competing  carriers.  Powell 
argued  that  market  forces,  and  not  the  government,  should  deter¬ 
mine  the  competitive  landscape  of  the  telecom  industry  but  he  also 
pushed  the  FCC  to  get  more  involved  in  areas  such  as  policing  in¬ 
decency  on  television  and  radio  airwaves.  In  November,  Powell’s 
FCC  ruled  that  VoIP  carriers  were  exempt  from  most  state  regulation 
and  taxes.  Powell  argued  that  VoIP  will  give  consumers  a  new  tele¬ 
com  choice,  resulting  in  lower  prices  and  better  service.  Some  con¬ 
sumer  and  technology  groups  faulted  Powell  for  pushing  policies 
favoring  large  companies,  particularly  large  incumbent  telecom 
carriers,  to  the  detriment  of  competition. 

MCI  snaps  up  security  company 

■  MCI  last  week  announced  plans  to  acquire  NetSec,  a  managed  security  service 
provider,  for  $105  million.“We  want  to  make  MCI’s  brand  synonymous  with  security’ says 
Jonathan  Crane,  executive  vice  president  and  chief  strategy  officer  at  the  carrier.  NetSec 
provides  managed  and  professional  security  services  to  the  federal  government  and 
enterprise  business  users  in  32  countries  in  the  Americas,  Europe,  Africa  and  Asia.  Crane 
says  NetSec  is  bringing  risk  and  vulnerability  assessment  professional  services  to  MCI. 

Phishing  reports  continue  to  increase 

■  Reports  of  online  phishing  attacks  were  up  again  in  December,  when  more  than  1,700 
active  phishing  Web  sites  were  reported,  a  10%  jump  from  the  previous  month,  according 
to  the  Anti-Phishing  Working  Group.The  group  reported  a  steady  increase  in  both  the  num¬ 
ber  of  phishing  Web  sites  and  e-mail  messages,  and  evidence  of  more  sophisticated  tech- 


■  TheGoodfheBadlheUgly 


Fcding  Wanted.  Not  only  did  Oracle  want  PeopleSoft  badly  enough  to 
pay  $10.3  billion  for  the  company,  now  PeopleSoft  customers  are  feeling  the  love 
from  other  vendors.  Microsoft  two  weeks  ago  started  offering  them  discounts  on 
its  competing  software,  and  last  week  SAP  responded  with  a  maintenance  and 
migration  service  for  PeopleSoft  customers  with  itchy  feet. 

^2$  Virtually  gone?  First  Virtual  Communications  of  Redwood,  Calif.,  maker 
of  the  Click  to  Meet  video  and  Web  conferencing  suite,  earlier  this  month  furloughed 
all  of  its  employees  and  is  likely  to  file  for  bankruptcy  protection  as  it  mulls  its 
future.  According  to  a  filing  with  the  Securities  and  Exchange  Commission,  the 
company  furloughed  indefinitely  some  90  to  100  employees  as  of  Jan.  6  and  has 
essentially  discontinued  operations. 


Mi  Evil  twin.  AThe  BBC  has  reported  a  new  scam  targeting  Wi-Fi  users.  So- 
called  “evil  twins"  are  fake  hot  spots  that  overpower  legitimate  hot  spots  with  their 
signal  strength  in  order  to  lure  wireless  end  users,  only  to  make  the  data  they 
transfer  vulnerable  to  theft. 


niques  to  hijack  personal  data.  More  than  9,000  unique  e-mail  messages  linked  to  phish¬ 
ing  scams  were  identified  by  the  APWG  in  December,  an  increase  of  6%  from  the  month 
before,  and  a  38%  increase  over  the  number  reported  in  July  Again  in  December,  financial 
services  companies  were  the  top  target  of  phishing  scams  (85%). 

Progress  made  on  802.1  In  WLAN  standard 

■  The  IEEE  802.1  In  Task  Group  last  week  winnowed  out  some  proposals  for  a  standard 
that’s  intended  to  increase  wireless  LAN  throughput,  not  just  the  overall  data  rate, to  at  least 
100M  bit/sec.  Qualcomm  withdrew  its  separate  proposal  and  joined  one  of  the  two  main 
groups  remaining.  And  Motorola’s  proposal  failed  to  win  enough  votes  during  the  ballot 
to  stay  in  the  running.Two  main  proposals  remain:TgnSync, which  includes  Atheros, Cisco, 
Intel,  Nokia  and  now  Qualcomm,  got  about  50%  of  the  votes;  and  WWiSE,  which  includes 
Airgo,  Broadcom,  STI,  and  Texas  Instruments,  got  about  34%.  A  proposal  has  to  win  at  least 
75%  to  “win”  as  the  basis  for  the  standard.  Both  proposals  are  based  on  multiple  input,  mul¬ 
tiple  output  technology,  which  generates  two  or  more  unique  radio  signals,  and  uses  two 
or  more  transmit/receive  antennas.  Airgo  is  the  only  company  to  ship  a  MIMO  chipset. 


COMPENDIUM 

CarPC 

There’s  a  breed  of  hobbyists  who  equip  their  SUVs  with  PCs:  “My  CarPC  layout  will 
include  a  7-inch  widescreen  LCD  touchscreen  monitor  in  the  dash  (VGA,  not  composite  or 
svideo),  DVD/CD  burner  in  the  glove  box,  9-in-1  card  reader  with  USB  and  1394  ports  in 
the  glovebox,  802.1 1g  wireless  networking,  bluetooth,  IR  remote,  200G  HD  for  lots  of 

storage  space . . ."  Read  more  at  www.nwfusion.com,  DocFinder:  5444. 


HP  settles  suit  with  Intergraph 

■  HP  last  week  said  it  has  agreed  to  pay  $141  million  to  Intergraph  to  settle  a  dispute  over 
HP’s  alleged  infringement  of  Intergraph’s  microprocessor  patents.  The  companies  have 
entered  an  agreement  that  grants  HP  a  license  to  all  of  Intergraph’s  patents,  and  provides 
Intergraph  a  license  for  any  HP  patents  relating  to  Intergraph’s  products,  HP  says.The  set¬ 
tlement  resolves  several  outstanding  lawsuits  between  the  companies.  One  of  the  suits, 
filed  in  the  U.S.  District  Court  for  the  Eastern  District  of  Texas,  had  been  due  to  begin  trial 
Feb.  21.  The  suits  relate  to  technologies  Intergraph  developed  for  its  Clipper  family  of 
microprocessors,  which  is  now  discontinued. 
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This  morning  I  set  up  a  firewall  in  London, 
fought  a  server  attack  in  Tokyo  and 
rebooted  a  mail  server  in  New  York. 
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Manage  your  data  center  from  anywhere... 

In  today's  pressure  filled  “uptime”  environment  where  a  few 
minutes  can  cost  you  big  dollars,  customer  confidence  and 
worker  productivity,  you  can't  afford  to  have  IT  problems.  And, 
you  know  fewer  administrators  and  “lights  out”  control  of  your 
data  centers  gives  you  a  much-needed  security  buffer. 


Lantronix  gives  you  access  to  ALL  of  your  data  center  assets 
from  anywhere  over  the  Internet  via  a  browser,  and  total  out-of- 
band  access  if  the  network  is  down.  We  also  offer  the  only 
console  manager  available  with  a  NIST-certified  implementation 
of  Advanced  Encryption  Standards  (Rijndael)*  along  with  SSL 
and  SSH  -  assuring  you  the  highest  level  of  security  available. 


SecureLinx™ 

Lights  out  remote  data  center  management. 


Secure  Console  Managers 

Remote  management  of  Linux,  Unix  and 
Windows®  2003  servers,  routers,  switches, 
telecom  and  building  access  equipment. 

-  Respond  faster  and  reduce  downtime 

-  Consolidate  resources  and  minimize  costs 


Remote  KVM™  via  IP 

Manage  an  entire  room  full  of  Windows  and 
Linux  servers  from  a  single  desktop,  from 
anywhere  over  the  Internet. 

-  Eliminate  need  for  multiple  keyboards, 
monitors  and  mice 

-  No  client  software  required 


LANTRONIX* 


Remote  Power  Managers 

Control  the  power,  individually,  to  every  device 
in  the  data  center  via  a  web  browser. 

-  Reboot  system  remotely 

-  Ensure  safe  power  distribution  and  reduce 
in-rush  overload 
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SecureLinx  SLC16 
Winner  of  the  Network 
Computing  Editor’s 
Choice  Award 
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Editor’s 

Choice 


Network  anything.  Network  everything. 


'As  of  August  2004,  SecureLinx  SLC  is  the  only  console  manager  with  a  NIST-certified  implementation  of  Advanced  Encryption  Standards  as  specified  by  FIPS-197 
(Federal  Information  Processing  Standards).  ©  2005  Lantronix,  Lantronix  is  a  registered  trademark,  and  SecureLinx  and  Remote  KVM  are  trademarks  of  Lantronix,  Inc. 


www.lantronix.com  i  (800)  422-7055 
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ICANN  accepts  bids  to  operate 


■  BY  CAROLYN  DUFFY  MARSAN 

The  contest  to  operate  the  Inter¬ 
net’s  .net  domain  has  begun,  with 
four  leading  domain  name  ser¬ 
vice  providers  submitting  bids  by 
last  week’s  deadline  to  the 
Internet  Corporation  for  Assigned 
Names  and  Numbers. 

Incumbent  VeriSign  is  pitted 
against  three  main  competitors: 
Afilias,  which  operates  the  .info 
and  .org  domains;  Denic,  which 
operates  the  German  .de  domain; 
and  NeuLevel,  which  operates  the 
.biz  and  .us  domains. 

ICANN  says  it  will  select  a  win¬ 
ner  by  March,  with  the  transition 
of  the  .net  domain  —  if  there  is 
one  —  to  be  completed  by  June 
30,  when  VeriSign’s  contract 
expires. 

Although  less  popular  than 
.com,  the  .net  domain  is  consid¬ 
ered  a  critical  component  of  the 
Internet’s  infrastructure.  Five  mil¬ 
lion  .net  names  have  been  regis¬ 
tered,  compared  with  30  million 
.com  names.  Many  network  engi¬ 
neers  rely  on  servers  with  .net 
names  to  keep  their  higher  profile 
Web  operations  up  and  running. 


ISPs  such  as  EarthLink  and 
Comcast  run  their  e-mail  opera¬ 
tions  on  the  .net  domain. 

Amazon.com,  Microsoft.com 
and  Wal-mart.com  are  among  the 
e-commerce  sites  that  have 
DNS  servers  running  on  .net. 
Government  agencies,  inclu¬ 
ding  the  Federal  Emergency 
Management  Agency  and  the 
National  Security  Agency  depend 
on  .net  servers  to  support  .gov 
Web  sites. 

“The  federal  government  is 
interested  in  what  happens  to 
.net,”  says  Tom  Galvin,  vice  presi¬ 
dent  of  government  relations  for 
VeriSign.  “For  whitehouse.gov,  all 
four  name  servers  are  on  .net.” 

VeriSign,  which  operates  both 
the  .net  and  .com  registries,  says 
.net  is  the  largest  top-level 
domain  when  ranked  by  number 
of  hosts  connected  to  the 
Internet. 

“The  most  important  thing  for 
all  .net  users  is  stability  and  secu¬ 
rity?’ says  Richard  Tindal,  vice  pres¬ 
ident  of  registry  services  for 
NeuLevel.  “That’s  the  primary 
focus  of  our  proposal.” 

The  .net  registry  operates  the 


Facts  about  .net 

Less  popular  than  .com, 

but . . . 

•  5  million  .net  names  are 
registered. 

•  4  billion  .net  queries  are 
handled  on  average  each 
day. 

•  58%  of  all  Internet 
computer  hosts  use  .net. 

•  30%  of  the  world's  name 
servers  use  .net. 

•  155  billion  e-mails  are  sent 
each  day  using  .net 
directly  or  for  name 
servers. 

highly  available  and  redundant 
servers  around  the  globe  that 
handle  billions  of  .net  queries 
per  day.  The  .net  registry  also 
supports  a  massive  database  that 
includes  information  about  each 
.net  name  and  handles  addi¬ 
tions,  deletions  and  changes  to 
that  information. 

The  .net  registry  business 


brings  about  $26  million  per  year 
to  VeriSign,  according  to  an 
analysis  by  Legg  Mason.The  new 
.net  contract  will  last  for  six 
years. 

VeriSign  is  emphasizing  perfor¬ 
mance  in  its  bid,  and  commits  to 
higher  service-level  agreements 
than  are  in  the  current  contract. 
VeriSign  says  it  has  a  record  of 
providing  100%  availability  of 
.net  resolution  services. 

VeriSign  also  stresses  that  it 
owns  and  operates  a  global  infra¬ 
structure  to  support  .net, and  that 
it  has  invested  more  than  $150 
million  in  recent  years  to  up¬ 
grade  that  infrastructure  so  it  can 
handle  more  than  4  billion  .net 
queries  each  day. 

Afilias  is  touting  its  successful 
transition  of  the  .org  registry  in 
2003,  when  it  took  over  back-end 
operations  from  VeriSign.  Afilias 
also  pioneered  the  use  of  a  new, 
more  secure  protocol  for  DNS 
registry  and  registrar  comm¬ 
unications  called  Extensible 
Provisioning  Protocol  (EPP). 

“We’re  the  only  ones  that  have 
any  migration  experience  that  is 
on  the  scale  of  what  .net  is  going 


Chipset  to  cut  chunk  out  of  WLAN  costs? 


■  BY  PHIL  HOCHMUTH 

Broadcom  this  week  is  expected  to  an¬ 
nounce  a  multifunction  chipset  that  could 
lead  to  a  tenfold  decrease  in  the  cost  of  wire 
less  Ethernet  switching  gear. 

With  features  such  as  WLAN  fast-handoff, 
security  and  access  point  provisioning  spun 
into  Broadcom’s  new  silicon,  users  could  ex¬ 
pect  to  see  more  integrated  WLAN/LAN 
switches  at  a  lower  price  in  the  near  future. 
While  some  analysts  say  Cisco’s  recent  buyout 
of  Airespace  might  signal  the  beginning  of  the 
end  for  the  WLAN  switch  market,  some 
observers  say  the  Broadcom  announcement 
might  commoditize  the  market. 

“The  Broadcom  move  is  a  clear  sign  the  mar¬ 
ket  is  commoditizing, ’’says  Stan  Schatt,an  ana¬ 
lyst  with  Current  Analysis.  “What  it  means  is 
that  second-tier  companies  now  can  offer 
very  low-cost  wireless  switches.  The  guys  who 
are  trying  to  make  their  living  just  selling  wire¬ 
less  switches  like  Aruba  and  Trapeze  are 
clearly  on  borrowed  time.” 

Broadcom  plans  to  announce  its  Strata- 
XGSIII  LAN  switch  architecture  —  the  basic 
guts  of  a  switch,  including  Layer  2  and  3  pro¬ 
cessing.  Besides  10G  Ethernet  and  IPv6  rout¬ 
ing,  these  chips  will  support  several  key  fea¬ 
tures  that  have  come  to  define  a  WLAN 
switch.  This  means  any  vendor  might  soon 
be  able  to  inexpensively  build  a  WLAN 


switch  based  on  commodity  chips,  which 
would  equate  to  lower  price  tags  for  enter¬ 
prise  customers. 

Broadcom’s  StrataXGSIII  silicon  includes 
hard-coded  protocols  that  could  let  WLAN 
switches  based  on  the  chip  communicate 
with  each  other  through  secure  tunneling. 
This  would  let  the  switches  hand-off  Wi-Fi 
clients  roaming  between  thin  access  points 
attached  to  different  switches  without  inter¬ 
ruption,  Broadcom  says.  These  features  are 
based  on  technology  defined  by  the  IETF’s 
Control  and  Provisioning  of  Wireless  Access 
Point  working  group. 

Other  technologies  going  into  the  switch 
chips  include  embedded  802.  IX  support  for 
authenticating  WLAN  users,  encryption  of 
WLAN  access  point  control  traffic,  and  exten¬ 
sion  of  802. IQ  virtual  LAN  support  for  WLAN 
connections,  which  lets  individual  end  users 
attached  to  a  shared-bandwidth  access  point 
to  be  split  up  into  virtual  LANs. 

Broadcom  is  also  partnering  with  NextHop 
Technologies,  a  maker  of  WLAN  software  that 
handles  configuration,  management,  provi¬ 
sioning  and  Wi-Fi  device  detection  functions 
on  a  network.  NextHop  purchased  the  intel¬ 
lectual  property  of  WLAN  switch  start-up 
Legra  Systems  in  October  2004.  Between  the 
StrataXGSIII  chips  and  NextHop  software, 
Broadcom  says  it  can  offer  hardware  vendors 
the  core  components  of  a  WLAN  switch. 


“We  anticipate  that  [WLAN  switch]  products 
built  on  the  StrataXGSIII  architecture  will  be 
10  times  less  expensive,  on  average,”  than  cur¬ 
rently  available  WLAN  switching  gear, says  Eric 
Hayes,  director  of  marketing  for  Broadcom. 

According  to  1DC,  Broadcom  is  the  market 
leader  in  Ethernet  switch  silicon  with  more 
than  60%  market  share,  followed  by  such  ven¬ 
dors  as  Intel,  Agere  Systems  and  Marvell. 
Broadcom  first  introduced  WLAN  silicon  for 
access  points  in  September  2004. 

Most  switch  vendors  use  chips  from  so- 
called  “merchant”  supplies,  where  low  prices 
are  key  and  features  are  mostly  standardized. 
This  lets  vendors  concentrate  R&D  spending 
on  developing  ASICs  and  other  hardware 
technologies  for  their  respective  core  routing 
gear,  where  vendors  try  to  differentiate  them¬ 
selves  with  unique  features  and  outdo  each 
other  in  performance. 

But  because  the  WLAN  switch  market  is 
focused  mainly  at  the  edge  —  where  WLAN 
clients  and  access  points  meet  the  wired  net¬ 
work  —  the  prospect  of  lower-cost  merchant 
silicon  focused  on  this  market  could  mean 
trouble  for  companies  specializing  in  WLAN 
switching. 

Schatt  says  the  commoditizing  of  WLAN 
technology  could  force  vendors  to  focus 
more  on  value-add  technologies  and  propri¬ 
etary  technologies  beyond  IETF  and  IEEE 
standards.* 
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to  represent,”  says  Roland  La- 
Plante,  chief  marketing  officer  for 
Afilias.  “We  know  from  experi¬ 
ence  that  [migrating  to  EPP]  is 
not  an  easy  task.  That’s  some¬ 
thing  that  VeriSign  hasn’t  done.” 

Denic  is  emphasizing  its  non¬ 
profit  status  as  an  advantage  in 
the  operation  of  the  infrastruc¬ 
ture-oriented  .net  domain.  During 
the  10  years  that  Denic  has  oper¬ 
ated  the  .de  registry  it  has  grown 
into  the  world’s  second-largest 
domain,  with  more  than  8  million 
names  registered. 

“What’s  most  important  about 
us  is  that  we  are  nonprofit  and 
we  are  very  technical,"  says 
Sabine  Dolderer,  director  of 
Denic.“We  will  not  compete  with 
registrars." 

NeuLevel’s  bid  focuses  on  new 
technology  and  services,  includ¬ 
ing  support  for  IPv6,  the  next 
generation  of  the  Internet’s  main 
protocol,  and  support  for  inter¬ 
nationalized  domain  names. 
NeuLevel  has  teamed  with  Japan 
Registry  Services,  which  operates 
Japan’s  .jp  domain,  on  its  .net 
bid.  The  two  companies  have 
formed  a  joint  venture  called 
Sentan  Registry  Services. 

“We  see  the  .net  space  as  being 
a  global  space,’ Tindal  says. 

It’s  unclear  whether  prices  for 
.net  names  will  go  down  as  a 
result  of  the  .net  procurement. 
Today,  .net  names  wholesale  for 
$6  per  year,  but  they  retail  for 
around  $35  per  year  for  a  one- 
year  registration,  and  $15  per 
year  for  a  10-year  registration. 

Two  other  issues  might  play  a 
role  in  the  award  of  the  .net  con¬ 
tract:  VeriSign’s  history  of  con¬ 
tentious  relations  with  ICANN, 
and  ICANN’s  desire  for  a  more 
competitive  domain  name  indus¬ 
try  ICANN  observers  predict  the 
two  parties  will  end  up  in  court  if 
VeriSign  isn’t  selected.* 


Corrections 


IB  In  the  Voice  over  Wireless 
H  LAN  test  (Jan.  10,  page  38),  a 
few  data  points  on  some  of  the 
charts  were  incorrectly  labeled. 
The  corrected  chart  data 
appears  at  www.nwfusion.com, 
DocFinder:  5430. 

B  In  the  Cool  Tools  column, 
(Jan.  17,  page  36)  an  incorrect 
price  was  listed  for  the  new 
1  Buffalo  Technology  TeraStation. 
||  The  correct  price  is  $999. 
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Disk-Based  Backup 


Smarter  disk-based  backup.  Pathlight  VX  2.0  uses  advanced  policy-based  data  management  to 
merge  the  capacity  of  disk  and  tape  into  a  single,  unified  solution.  Disk  gives  you  twice  the  backup  ' 
performance  of  conventional  libraries — and  even  faster  restore.  Tape  delivers  scalability,  VjaJue  •  TC 
secure  retention,  and  flexible  disaster  recovery.  You  get  the  best  of  both  technologies  in  a  single  • 
solution  that  slips  right  into  your  existing  backup  system.  •  \ 

.•  ■ 

Clear  investment  protection.  With  Pathlight  VX  2.0,  you  can  boost  your  backup  and  restore 
whether  you  need  a  system  for  3.8  TB  or  3,000  TB — and  pay  a  lot  less  for  it.  You  can  even  use  your 
own  tape  library  as  part  of  the  system — tape  storage  can  be  supplied  by  one  of  ADIC's  intelligent 
Scalar®  libraries,  or  by  your  legacy  StorageTek  L-Series™  system. 

Room  to  grow,  smarts  to  save.  Pathlight  VX  2.0  delivers  all  the  performance  of  disk  and  the  fault 
tolerance  of  RAID,  but  it  also  scales  to  meet  enterprise  capacity  demands  and  grows  easily  with  your 
data — and  it  can  cut  your  costs  in  half  or  more  compared  to  conventional  products. 


Looking  at  disk-based 
backup  but  not  sure  how 
to  make  it  happen?  Get 
the  smarter  disk  backup 
solution — Pathlight3  VX  2.0 
from  ADIC,  the  leading 
provider  of  tape  libraries 
for  open-systems  backup.  * 


Market  share  from  Gartner  Dataquest,  Tape  Automation  Systems  Market  Shares,  2003,  F.  Yale,  April  2004. 


by  W.  Curtis  Preston,  Evaluating  Disk-Based  Backup  Solutions. 


Intelligent  Storage™ 
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Oracle  airs 
PeopleSoft 
integration 
game  plan 

■  BY  JORIS  EVERS 

Analysts  and  customers  last 
week  welcomed  Oracle’s  an¬ 
nouncement  of  a  plan  to  inte¬ 
grate  PeopleSoft  applications 
with  its  own,  but  said  they  now 
want  to  see  the  company  deliver 
results  based  on  these  promises. 

Project  Fusion  is  the  company’s 
effort  to  combine  the  Oracle,  Peo¬ 
pleSoft  and  J.D.  Edwards  enter¬ 
prise  applications  into  one  suite. 
Fusion  isn’t 
completely 
due  until 
2008,  al¬ 
though  the 
first  deliver¬ 
ables  are 
set  to  ap¬ 
pear  next 
year,  com¬ 
pany  execu¬ 
tives  say 

“We  still 
have  a  lot 
more  questions  than  answers,” 
says  Andreas  Bitterer,  vice  presi¬ 
dent  of  technology  research  ser¬ 
vices  at  Meta  Group.  They  have 
told  us  what  they  want  to  do,  not 
how  they  are  going  to  do  it.” 

What  Oracle  did  say  is  that 
Fusion  will  be  Java-based  and 
use  standard  technology  for  easy 
integration  with  other  applica¬ 
tions.  It  will  provide  a  simple 
upgrade  from  PeopleSoft,  Oracle 
and  J.D.  Edwards  applications, 
Oracle  CEO  Larry  Ellison  says. 

“I  expect  the  majority  of  cus¬ 
tomers  will  do  the  upgrade,” 
Ellison  says. 

Dan  Shannon,  a  senior  Oracle 
consultant  at  FMT  Systems,  says 
Oracle  put  “a  good  spin”  on  the 
integration  challenge.  Although 
integrating  PeopleSoft  and  Ora¬ 
cle  software  will  be  tough, Shan¬ 
non  says  he  believes  that 
Oracle  can  build  a  very  good 
unified  applications  suite.  “If 
they  don’t  deliver,  they’re  done,” 
he  says. 

The  2008  due  date  for  Fusion 
and  the  announced  end  of  sup¬ 
port  date  for  PeopleSoft  prod¬ 
ucts  in  2013  give  PeopleSoft  and 
J.D.  Edwards  users  time  to  weigh 
their  options,  Bitterer  says.“It  is  a 
comforting  story’  he  says. 

Evers  is  a  correspondent  with 
the  IDG  News  Sewice. 


Oracle  CEO  Larry 
Ellison  says  Fusion 
will  be  an  easy 
upgrade  from  its 
acquired  apps. 


Sun  readies  compliance  software 


■  BY  ANN  BEDNARZ 

Sun  this  week  is  expected  to 
announce  software  aimed  at 
helping  companies  keep  on  top 
of  mandates  imposed  by  legisla¬ 
tion  such  as  the  Sarbanes-Oxley 
Act,  Basel  II  and  the  Health 
Insurance  Portability  and  Ac¬ 
countability  Act. 

Identity  Auditor  builds  on  Sun’s 
identity  management  portfolio, 
which  includes  user  provisioning 
tools  gained  in  its  2003  purchase 
of  Waveset  Technologies.  The 
package  is  designed  to  help  com¬ 
panies  satisfy  the  onslaught  of 
reporting  requirements  they’re 
facing  from  internal  and  external 
auditors,  says  Sara  Gates,  vice 
president  of  identity  manage¬ 
ment  at  Sun. 

“Companies  are  struggling  to 
give  auditors  what  they  need, 
which  is  proof  that  things  are 
under  control,”  Gates  says.  “Right 
now,  getting  this  information 
together  is  extremely  labor-inten¬ 
sive.” 

The  purpose  of  Identity  Auditor 
is  to  automate  key  auditing  and 
review  processes  that  need  to  be 
repeated  regularly  for  a  company 
to  stay  on  the  right  side  of  the  law. 
With  it,  companies  can  present  a 
unified  view  of  users’  identity  and 
system  access  activities.  The  soft¬ 
ware  provides  visibility  into  the 
security  controls  that  exist  to  pro¬ 
tect  enterprise  applications,  so 
companies  can  verify  the  exis¬ 
tence  of  those  controls  as  re¬ 
quired. 

Identity  Auditor  goes  a  step 
beyond  typical  identity  manage¬ 
ment  software,  which  lets  compa¬ 
nies  control  users’  access  to  sys¬ 
tems.  From  the  time  a  user  ac¬ 
count  is  created  to  its  deletion, 
identity  management  software  is 
designed  to  monitor,  log  and 
report  what  each  user  is  doing. 
The  technology  typically  de- 


More  online! 


Want  to  know  how  federal  compliance  laws 
affect  you?  Tune  into  our  IT  Briefing 
Webcast  on  Sarbanes-Oxley  and  other 
regulatory  issues.  Senior  Editor  Ann 
Bednarz  offers  her  insight  on  the  topic. 

DocFinder:  1127 


Identity  spend 

Worldwide  spending  on 
identity  management 
products  will  grow 
from  $738  million  in 
2004  to  more  than 

$10.2 

billion 

by  2008. 

SOURCE:  RADICATI  GROUP 

pends  on  a  combination  of  ac¬ 
cess  management,  provisioning, 
password  management,  single 
sign-on  and  directory  technology 
While  identity  management 
products  look  for  generic  provi¬ 
sioning-related  issues  such  as  a 
dormant  account,  Identity  Aud¬ 
itor  can  be  tuned  to  look  for  more 
specific  conditions  such  as  a  seg¬ 
regation  of  duties  conflict  posed 


by  a  user’s  access  to  certain  appli¬ 
cations.  The  software  then  can 
notify  the  appropriate  personnel 
of  the  conflict  and  initiate  a  work- 
flow  to  remediate  the  problem. 

The  timing  of  the  new  product 
release  is  appropriate,  with 
Sarbanes-Oxley  rules  pertaining 
to  internal  controls  set  to  go  into 
effect  this  spring.  Section  404  of 
the  legislation  requires  public 
companies  to  include  in  their 
annual  reports  a  statement  from 
managers  attesting  to  the  exis¬ 
tence  and  effectiveness  of  inter¬ 
nal  controls  over  financial  re¬ 
porting,  and  a  statement  from 
outside  auditors  verifying  those 
controls. 

As  compliance  efforts  heat  up, 
the  market  for  identity  manage¬ 
ment  technology  —  including 
full  suites  and  best-of-breed  tools 
for  provisioning,  access  and 
authentication,  and  federated 
identity  —  will  grow  from  $738 
million  in  worldwide  revenue  in 
2004  to  more  than  $10.2  billion 
by  2008,Radicati  Group  predicts. 


Sun  competes  in  the  identity 
management  arena  against  ven¬ 
dors  including  Computer  Associ¬ 
ates,  IBM  and  Microsoft.  Just  re¬ 
cently,  Microsoft  previewed  an 
upgrade  to  its  Identity  Integra¬ 
tion  Server,  code-named  Gemini, 
that  will  include  self-service  pro¬ 
visioning  features  to  let  users 
maintain  their  own  identity  infor¬ 
mation. 

Sun’s  Identity  Auditor  software 
is  slated  to  be  available  in  March 
at  a  starting  price  of  $250,000. 
The  software  runs  on  Windows, 
Solaris,  Linux,  HP-UX  and  AIX, 
and  can  be  deployed  as  a  stand¬ 
alone  product  or  integrated  with 
identity  provisioning  software 
from  Sun  or  another  vendor.  For 
integration  with  third-party  provi¬ 
sioning  engines,  Identity  Auditor 
supports  Service  Provisioning 
Markup  Language,  an  XML-based 
framework  the  Organization  for 
the  Advancement  of  Structured 
Information  Standards  is  devel¬ 
oping  for  the  interoperability  of 
service  provisioning  requests.® 


Symantec  boxes  to  battle 
spam  and  viruses 


■  BY  ELLEN  MESSMER 

Symantec  this  week  is  expect¬ 
ed  to  announce  a  series  of  appli¬ 
ances  that  do  double  duty  by 
combatting  both  spam  and 
viruses. 

The  8240  and  the  8260  appli¬ 
ances  are  based  on  the  anti-spam 
technology  gained  from  Sym¬ 
antec’s  acquisition  of  Brightmail 
combined  with  Symantec’s  anti¬ 
virus  software. 

Corporations  often  find  appliances  are  easier  to 
set  up  and  use  than  loading  and  configuring  soft¬ 
ware  on  a  hardware  platform,  says  Tom  MacArthur, 
principal  with  systems  integrator  Storbase  in 
Waltham,  Mass.,  which  is  beta-testing  the  8200. 

Although  customers  sometimes  request  to  have 
multiple  security  protections  —  whether  it  is  anti¬ 
spam,  anti-virus,  VPN/firewall,  intrusion  prevention 
or  others  —  unified  into  one  appliance,  the  down¬ 
side  might  be  additional  latency  in  processing. 

According  to  MacArthur,  there  appears  to  be 
slightly  increased  latency  that  results  from  combin¬ 
ing  anti-virus  and  anti-spam  processing,  but  his 
tests  of  the  8200  appliance  don’t  indicate  it  would 
be  a  concern  in  e-mail  transmission  even  under 
heavy  loads. 

The  8200s  will  compete  against  McAfee’s  Web- 
Shield  line. 

Symantec  also  plans  to  announce  the  8 160,  a  ded- 


Two-in-one  device 

Symantec’s  8200  series  of  appliances  fight  spam  and  viruses. 


Type 

Number  of  users 

Cost 

8240 

100  to  1,000 

$1,995  and  up 

8260 

Up  to  10,000 

$4,995  and  up 

icated  anti-spam  gateway  that  uses  TCP  traffic-shap¬ 
ing  to  slow  the  speed  at  which  originating  sources  of 
spam  can  send  to  less  than  one  message  every  sev¬ 
eral  minutes.  Symantec’s  gateway,  based  on  technol¬ 
ogy  gained  in  its  acquisition  of  TurnTide  last  July  is  a 
defensive  measure  for  companies  that  get  large  vol¬ 
umes  of  spam,  says  Carlin  Wiegner,  Symantec  prod¬ 
uct  manager  for  mail  security  solutions. 

“The  8 160,  which  would  typically  sit  in  front  of  the 
mail  gateway  uses  a  process  in  [TCP]  to  tell  the  var¬ 
ious  IP  addresses  originating  spam  to  go  more 
slowly  he  says. 

The  result  of  this  basically  makes  it  uneconomi¬ 
cal  to  send  spam  to  the  targeted  IP  addresses.  He 
says  the  $5,000  traffic-shaping  appliance  could  be 
used  as  a  stand-alone  anti-spam  device,  or  in  con¬ 
junction  with  either  of  the  8200  series  of  combined 
anti-spam/anti-virus  appliances  expected  to  ship 
next  month.  ■ 
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LINE-RATE  GIGABIT  &  10  GIGABIT  PORT  DENSITY 


You  admire  precision  engineering  and  seek  out 
maximum  performance.  You  want  the  best.  Presenting 
the  E-Series  from  ForcelO  Networks:  The  first  resilient 
switch/router  to  deliver  672  line-rate  Gigabit  Ethernet 
or  56  line-rate  10  Gigabit  Ethernet  ports  per  chassis  — 
more  than  twice  the  capacity  of  our  competitors. 
That's  Terabit  performance. 


Based  on  ForcelO's  revolutionary  TeraScale  technology, 
the  E-Series  delivers  industry-best  metrics  in  density, 
throughput,  resiliency  and  security.  The  advanced 
architecture  of  the  E-Series  ensures  predictable 
performance  with  traffic-variation  dampening, 
provides  control  plane  resiliency  to  prevent 
DoS  attacks,  and  supports  line-rate,  real-time 
security  filters  for  high  performance  security. 


To  test  drive  the  E-Series  in  your 
network,  contact  us  at  1-866-600-5100 
or  visit  www.force10networks.com. 


To  \  ieu  independent  TeraScale  test  results  from  The  Tolly  Group,  visit  www.force10networks.com  -  ,  G.  fo  'jWI 
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Microsoft  ends  bid 
to  move  Exchange 
to  anchor  platform 

■  BY  JOHN  FONTANA 

Microsoft  last  week  laid  out  revised  plans  for  Exchange,  including 
where  the  messaging  server  fits  into  the  company’s  overall  collabora¬ 
tion  scheme.  However,  the  company  did  not  say  when  its  next  major 
release  would  debut. 

With  Exchange  12,  the  code-name  for  the  next  version  of  its  messag¬ 
ing  server,  Microsoft  says  it  will  focus  on  cutting  operational  costs, 
improving  security  and  providing  a  range  of  enhanced  client  options. 

One  thing  that  won’t  change  is  the  Exchange  data  store.  Microsoft 
plans  to  keep  Exchange’s  Joint  Engine  Technology  database  engine, 
forgoing  previous  plans  to  incorporate  either  SQL  Server  2005  or  the 
futuristic  WinFS  universal  data  store. 

The  latest  Exchange  brings  to  a  close  Microsoft’s  attempt  to  turn  the 
server  into  the  center  of  its  collaboration  platform. That  effort  started 
with  Exchange  2000,  which  included  an  application  development 
model,  instant  messaging  and  Web  conferencing.  Those  things  were 
stripped  out  of  Exchange  2003.  Microsoft  scrapped  plans  in  May  for  a 
marquee  release,  code-named  Kodiak. 

“They  spent  a  lot  of  time  touting  Exchange  as  a  Notes  killer,  and  it 
wasn’t,”  says  Peter  O’Kelly  an  analyst  with  Burton  Group.  He  says  Micro¬ 
soft  has  done  a  good  job  retooling  Exchange. 

With  Exchange  12,  Microsoft  envisions  the  server  as  one  cog  in  a 
much  larger  set  of  servers,  clients  and  services  including  Office, 
Windows  Server,  SharePoint  Portal  Server  and  Windows  SharePoint 
Services,  Outlook,  Live  Communications  Server  and  mobile  devices. 

“We  are  aligning  the  development  of  Exchange  12  with  our  broader 
collaboration  vision,”  says  Dave  Thompson,  corporate  vice  president 
for  Microsoft. 

In  2005,  Microsoft  plans  to  release  via  the  Web  tools  for  sizing  storage 
needs  in  Exchange  2003,  troubleshooting  SMTP  and  analyzing  public 
folder  usage. Also  planned  is  integration  of  the  Exchange  Best  Practices 
Analyzer  tool  with  Microsoft  Operations  Manager  2005,  and  Service 
Pack  2  featuring  mobility  upgrades  and  anti-spam  technology 

Analysts  were  left  to  speculate  when  the  actual  Exchange  12  server 
will  ship. 

“In  our  estimation,  the  release  will  coincide  with  Office  12,  which 
we  think  is  in  the  second  half  of  2006,” says  Matt  Cain,  an  analyst  with 
Meta  Group.  ■ 


Goming  attractions 

Microsoft  last  week  previewed  features  for  the  next 
version  of  Exchange,  which  some  analysts  say  is  more 
than  a  year  away  from  hitting  the  market. 


Area  of  focus 


Cost  of  ownership 

Wizard  to  configure  server 

for  distinct  roles 

Continuous  backup 

Enhanced  search 

Web  service  APIs 

64-bit  support 

Security 

Policy  compliance  infrastructure 

Policy-based  security  folders 

Anti-spam  support 

Enhanced  ActiveSynch  and 
Provisioning  for  mobile  devices 

Client  options 

Expanded  connection  options  for 
Outlook  Web  Access 

PBX  integration  for  unified  messaging 

Notes  faithful  expecting 
clear  picture  from  IBM 


■  BY  JOHN  FONTANA 

Customers  are  expecting  IBM/ 
Lotus  to  finally  present  a  clear  pic¬ 
ture  for  the  future  of  Notes/ 
Domino  and  its  integration  with 
the  next-generation  Workplace 
environment  built  on  WebSphere 
when  the  company  convenes  its 
annual  Lotusphere  conference 
this  week. 

IBM/Lotus  is  taking  a  page  out 
of  rival  Microsoft’s  playbook  by 
focusing  much  of  its  conference 
on  developers  in  the  hope  that 
the  legions  of  Notes  developers 
can  help  smooth  the  integration 
between  the  traditional  Notes/ 
Domino  platform  and  the  next- 
generation  Java-based  Workplace 
environment. 

That  transition  has  been  any¬ 
thing  but  smooth  thus  far.  For  the 
past  few  years,  the  Lotus  faithful 
have  felt  that  IBM  was  pushing 
Workplace  and  WebSphere  and 
ignoring  Notes/Domino  even 
though  the  company  said  that 
was  not  the  case. 

“Last  year,  I  walked  away  from 
the  general  session  and  I  was  like 
‘yeah  . . .  so?”’  says  Bruce  Elgort, 
manager  of  information  services 
for  Sharp  Microelectronics  of  the 
Americas.  “I  just  think  this  is  the 
year  we  all  walk  away  and  we 
totally  understand  where  they  are 
going  and  how  we  [the  users] 
can  go  there.”  He  says  it  is  clear  to 
him  from  information  leading  up 
to  Lotusphere  that  Notes  is  not 
dead;“It  is  alive  and  well.” 

Sales  job  ahead 

That  attitude  is  what  IBM/Lotus 
needs  to  foster. 

“Right  now  the  battle  for  Lotus 
is  to  hold  onto  its  installed  base 
and  get  them  excited  about  the 
Workplace  generation,”  says  Matt 
Cain, an  analyst  with  Meta  Group. 
“One  of  the  Holy  Grails  of  the 
whole  transition  is  for  IBM  to 
deploy  a  development  tool  that 
has  the  ease  of  use  and  rapid 
application  development  of 
Domino  Designer  but  on  the  Java 
platform.” 

The  goal  is  part  of  a  larger  strat¬ 
egy  to  launch  a  strike  against 
Microsoft,  pitting  IBM’s  Java- 
based  development  tools  and 
WebSphere  against  Microsoft’s 
Visual  Studio  and  .Net  Frame- 
work.The  battle  is  for  the  hearts  of 
developers  building  applications 
for  full-feature  clients  such  as 


IBM’s  Workplace  Client  Technol¬ 
ogy  and  Microsoft’s  Office. 

IBM’s  newest  weapon,  the  Work¬ 
place  Designer, will  be  unveiled  at 
Lotusphere.  Workplace  Designer 
is  a  tool  aimed  at  those  familiar 
with  Domino  Designer’s  rapid 
application  development  envi¬ 
ronment.  Workplace  Designer  will 
incorporate  many  of  the  same 
form  and  scripting  features  of  the 
Domino  Designer.  This  will  let 
users  build  applications  based  on 


Java  2  Platform  Enterprise  Edition 
(J2EE)  that  run  on  Lotus  Work¬ 
place  on  the  WebSphere  platform. 

“With  Workplace  Designer  we 
have  paid  a  lot  of  attention  to 
making  sure  that  the  tool  is  a  very 
familiar  environment  that  lever¬ 
ages  the  skills  that  Domino 
Designers  have,”  says  Ken  Bis- 
conti,  vice  president  of  Work¬ 
place,  portal  and  collaboration 
for  IBM/Lotus. 

Bisconti  says  the  goal  of  Work¬ 
place  is  to  provide  an  integrat¬ 
ed  set  of  tools  that  range  from 
Workplace  Builder,  which  is 
used  to  assemble  pre-built  com¬ 
ponents  into  applications,  to 
script-based  Domino  and  Work¬ 
place  Designer  tools,  to  Ration¬ 
al  tools  that  write  low-level  Web 
services  and  Java  code. 


“All  of  those  tools  are  part  of  an 
integrated  portfolio  that  sub¬ 
scribes  to  the  Eclipse,  Java  and 
J2EE  foundation,”  Bisconti  says. 

“You  will  see  the  Domino 
metaphor  be  dominant  [among 
the  development  tools] .  It  is  so 
far  ahead  of  what  they  were 
able  to  do  with  WebSphere  and 
is  wider  known  than  the  tools 
from  Rational,”  says  Scott 
Wenzel,  a  Notes  administrator 
for  a  federal  agency. 


In  addition  to  the  focus  on 
tools,  IBM/Lotus  also  plans  to 
show  off  Version  7  of  Notes/ 
Domino,  which  is  slated  to  ship 
late  summer.  Two  of  the  high¬ 
lights  will  be  NSFDB2,  which  lets 
Domino  data  be  stored  in  a  DB2 
database,  and  improvements  to 
Domino  Designer  for  turning 
Domino  code  into  Web  services. 
Users  also  will  be  able  to  create 
overviews  of  their  applications 
using  the  Web  Services  Descrip¬ 
tion  Language,  a  format  for 
describing  a  Web  service.  Also 
shown  will  be  a  sneak  peek  at 
some  features  of  Notes/Domino 
7.5  and  8. 

IBM/Lotus  expects  more  than 
6,000  people  at  Lotusphere, 
which  runs  Jan.  24-27  in 
Orlando.  ■ 
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Lotus  road  map 

IBM/Lotus  has  a  full  slate  of  Notes/Domino  and 
workplace  releases  due  this  year. 

Timeline 

January-March 

tk 

Scheduled  software  milestones 

Notes/Domino  7.0  Beta  3 

Notes  6.0.5 

Notes  6.5.4 

Workplace  Web  Conferencing  Service 

April-June 

Lotus  Workplace  3.0 

July-September 

Support  ends  for  Notes  5.0 

Notes/Domino  7.0  Release 

When  everything  works  together, 
everything  changes  together. 

HP  BladeSystem  servers  allow  you  to  integrate  your  systems 
with  ease  for  unexpected  growth  or  other  business  demands. 
Powered  by  Intel  Xeon™  Processors,  these  innovative  servers 
adapt  to  change  in  a  seamless  modular  fashion,  creating  new 
operational  efficiencies  to  dramatically  upgrade  your  enterprise 
And  that  changes,  well,  everything. 


HP  ProLiant  BL30p  server  blades 


*  Re¬ 


solutions  for  the  adaptive  enterprise. 


Tf 


To  read  IDC’s  Adapting  to  Change:  Blade  Systems  Move  into  the  Mainstream,  visit  hp.com/go/bladesmagl9 
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Virtually  there 

Although  VMware  has  a  majority  market  share,  other  server  virtualization  packages 
are  available. 


Company/product 

Function 

Operating  system 

Cost 

VMware  ESX  Server 

Virtualizes  hardware,  allows 
different  operating  systems 

to  run. 

Windows  and  Linux 

$3,750  for  two 

processors 

Microsoft  Virtual 

Server 

Virtualizes  hardware,  allows 
different  operating  systems 

to  run. 

Windows 

Up  to  four  processors 
$499;  up  to  32 
processors  $999 

SWsoft  Virtuozzo 

Virtualizes  operating  system. 

Windows  or  Linux 

$995  per  processor 

Xensource  Xen 

Virtualizes  hardware,  allows 
different  operating  systems 

to  run. 

Linux,  NetWare,  AT&T 
Plan9 

Open  source 

Virtualization 

continued  from  page  1 

software  containers  that  include 
an  operating  system  and  applica¬ 
tions,  is  one  way  to  do  that. 

Interest  in  virtual  machine  tech¬ 
nology  has  been  growing.  IDC 
says  the  market  reached  more 
than  $300  million  in  2004  and  is 
on  pace  to  grow  at  a  rate  of  about 
18%  over  the  next  few  years. 

“It’s  been  one  of  the  faster  grow¬ 
ing  technologies  that  we’ve  en¬ 
countered,”  says  Galen  Schreck,  a 
senior  analyst  at  Forrester  Re¬ 
search.  “It  quickly  went  from  ‘You 
want  me  to  do  what?’  to  ‘Hey  that 
sounds  like  a  really  good  idea.’The 
people  I  speak  with  at  this  point 
are  convinced  of  the  technology 
and  convinced  of  the  solidity  of 
the  idea.” 

The  growing  interest  is  resulting 
in  a  surge  in  the  number  of  com¬ 
panies  rolling  out  virtualization 
technologies,  says  Dan  Kusnetzky 
a  vice  president  at  IDC. 

“Expect  to  see  some  interesting 
twists  on  [virtual  machine]  tech¬ 
nology  he  says.  “Right  now,  you 
could  think  of  this  technology  as 
starting  at  the  hardware  and  look¬ 
ing  up  —  how  you  encapsulate 
the  operating  system  and  all  the 
software  above  it.  That’s  not  the 
only  way  of  thinking  about  it.” 

Akimbi  is  building  an  enterprise 
application  that  will  leverage  vir¬ 
tualization  platforms.  According 
to  the  company’s  Web  site,  it  ap¬ 
pears  the  product  would  include 
management  tools  that  interface 
with  VMware,  Microsoft  Virtual 


Server  and  Solaris  partitions. 

“We’re  solving  a  business  prob¬ 
lem  and  it  just  so  happens  that  we 
can  use  virtualization  technology 
as  part  of  our  toolkit,”  says  James 
Phillips,  Akimbi  president  and 
CEO.“We’re  really  solving  business 
problems  by  building  applica¬ 
tions  that  make  clever  use  of  vir¬ 
tualization  technology  because 
it’s  available  and  it’s  affordable 
and  it  works." 

Enterprise  users  can  expect  a 
product  from  Akimbi,  which  re¬ 
cently  got  funding  from  Hummer 
Winblad  Venture  Partners,  Partech 
International  and  Stanford  Univer¬ 
sity  by  year-end,  he  says. 

Meanwhile,  Xensource,  a  com¬ 
pany  founded  to  provide  support 
and  maintenance  for  the  open 
source  Xen  virtualization  technol¬ 
ogy  also  recently  received  funding 
when  Sevin  Rosen  and  Kleiner- 
Perkins  added  $6  million  to  the 
organization’s  coffers. 

“Open  source  and  virtualization 
marry  two  fairly  powerful  trends 
and  Xen  is  a  tour-deforce  piece  of 
technology’  says  Nick  Sturiale, 
general  partner  for  Sevin  Rosen. 

IBM,  HR  Intel  and  Red  Hat  are 
among  those  working  with  Xen  to 
improve  the  open  source  virtual 
machine  technology 

Rolf  Neugebauer,a  researcher  at 
Intel  Research  Cambridge,  says 
the  chipmaker  has  been  involved 
in  the  Xen  project  for  more  than 
two  years.  One  of  the  focuses  of 
Intel’s  work  with  Xen  is  to  en¬ 
hance  security  around  the  Xen 
virtual  machines,  he  says. 

“Our  aim  is  to  support  multi¬ 


level  secure  systems,  and  we  plan 
to  extend  Xen  in  a  similar  way  as” 
Security-Enhanced  Linux,”  Neuge- 
bauer  says.  SELinux  is  a  project 
backed  by  the  National  Security 
Agency  that  adds  access  controls 
to  the  Linux  kernel. 

Xen  takes  a  similar  approach  to 
VMware,  but  analysts  say  it  has  a 
ways  to  go  before  it  will  be  a  seri¬ 
ous  contender  when  it  comes  to 
enterprise  virtualization.  One 
main  hurdle  is  that  Xen  requires  a 
modification  to  the  Linux  kernel. 
XenSource  CEO  Nick  Gault  says 
his  organization  is  talking  with 
Red  Hat  and  Novell,  which  have 
shown  interest  in  incorporating 
Xen  virtualization  into  their  distri¬ 
butions.  However,  analysts  suspect 
it  will  be  many  months  before  the 
commercial  distributions  include 
the  Xen  technology 

“Of  course,  Companies  want  to 


keep  their  eye  on  technologies 
that  are  on  the  horizon,  but  realis¬ 
tically  open  source  virtual  mach¬ 
ines  are  not  something  that  the 
average  enterprise  should  be 
spending  a  whole  lot  of  time  on  in 
2005,” says  Gordon  Haff.an  analyst 
at  Illuminata.  “Strictly  speaking  in 
the  x86  space  for  the  highest  end, 
most  efficient,  native  virtualiza¬ 
tion,  VMware  ESX  server  contin¬ 
ues  to  be  the  only  game  in  town.” 

Not  that  companies  such  as  Mi¬ 
crosoft  and  SWsoft  should  be  dis¬ 
counted.  Microsoft  recently  began 
shipping  Virtual  Server  2005,  tech¬ 
nology  the  company  got  when  it 
acquired  Connectix  in  2003. 
Virtual  Server  effectively  divvies 
up  the  hardware  so  that  multiple 
virtual  machines  can  run  on  a  sin¬ 
gle  CPU.  It  is  most  similar  to 
VMware’s  lightweight  GSX  server. 

Analysts  expect  Microsoft  to  en¬ 
hance  Virtual  Server,  but  say  that 
VMware  —  which  already  has 
rolled  out  management  tools 
such  as  Virtual  Center  to  stream¬ 
line  provisioning  and  configura¬ 
tion  and  VMotion,  which  lets  users 
move  live  virtual  machines  from 
one  physical  server  to  another  — 
is  far  ahead  of  the  game. 

SWsoft  takes  a  different  app¬ 
roach  to  virtualizing  servers.  It  vir¬ 
tualizes  the  operating  system  so 
that  multiple  instances  of  the 
operating  system  can  be  created 
from  one  installed  version. 

“There  are  advantages  and  dis¬ 
advantages  with  each  approach 
[to  virtualizing  servers] .  There’s 
no  one  best  way  If  you  provide 
virtualization  like  SWsoft,  you 
may  or  may  not  be  able  to  run 
more  than  one  operating  system 
on  that  server,”  says  Scott  Dona¬ 
hue,  vice  president  of  Tier  One 
Research. “But  SWsoft  can  create 
a  lot  of  different  virtual  servers 
using  one  host  [operating  sys¬ 
tem]  and  the  cost  savings  are 
greater  because  you  are  only  li¬ 
censing  one  [operating  system] 


per  server  rather  than  multiple 
[operating  systems]  per  server’’ 

That’s  what  attracted  Justin 
Schumacher,  software  and  sys¬ 
tems  design  engineer  for  industri¬ 
al  sensor  product  company 
Adaptive  Instruments  in  Hudson, 
Mass.,  to  SWsoft. 

“We  found  with  Xen  and  VM¬ 
ware  that  it  did  help  isolate  your 
software  from  your  hardware 
and  helped  it  make  it  a  little  eas¬ 
ier  to  manage,  but  they  didn’t 
help  the  cost  of  hardware  or  soft¬ 
ware,”  he  says. 

Schumacher  is  testing  SWsoft’s 
Virtuozzo  product  and  plans  to 
put  it  in  production  when  the  Win¬ 
dows  version  is  available  in  the 
first  half  of  the  year.  Today,  Virtu¬ 
ozzo  is  supported  only  in  Linux 
environments. 

‘To  use  Microsoft  Virtual  Server, 
you  have  to  buy  one  copy  of  Win¬ 
dows  for  the  host  machine  and 
one  copy  of  Windows  for  each  vir¬ 
tual  machine. You  don’t  save  a  lot 
on  hardware  costs  because  you 
still  need  to  pre-allocate  RAM  to 
each  virtual  machine,  whether  the 
virtual  machine  is  using  it  or  not," 
Schumacher  says.  “With  SWsoft 
you  only  have  to  buy  one  copy  of 
Windows,  each  virtual  machine  is 
using  that  copyYou  also  save  hard¬ 
ware  costs  because  RAM  doesn’t 
need  to  be  pre-allocated.” 

For  enterprise  users  faced  with  a 
growing  number  of  virtualization 
options,  the  most  important  task  is 
to  understand  exactly  how  they 
want  to  benefit  from  the  technol¬ 
ogy  experts  say 

“Before  they  rush  into  this,  I  urge 
them  to  consider  what  are  they 
really  trying  to  accomplish,  what 
the  other  ways  to  accomplish  it 
might  be,”IDC’s  Kusnetzky  says.“It’s 
very  important  to  look  at  vendors 
and  what  they’re  presenting  as 
their  road  map.  Virtual  machine 
technology  is  just  one  of  a  num¬ 
ber  of  technologies  that  can  help 
create  a  virtual  environment.”  ■ 


BMC  syncs  up  mgmt  tools 


■  BY  DENISE  DUBIE 

BMC  Software  has  begun  incorporating  a  com¬ 
mon  database  in  its  products  that  the  company  says 
should  ease  IT  service  management. 

BMC  quietly  added  the  Atrium  Configuration  Man¬ 
agement  Database  (CMDB)  to  its  Service  Impact 
Manager  5.0  product  in  December.  Also  this  week, 
BMC  is  announcing  the  database’s  inclusion  in  its 
new  Remedy  IT  Service  Management  Suite  6.0. The 
database  also  will  be  in  BMC’s  suite  of  three  IT  dis¬ 
covery  and  configuration  applications. 

The  upgraded  Remedy  suite,  a  package  of  four 
applications  that  starts  at  $50,000,  will  use  data  col¬ 
lected  and  stored  in  the  Atrium  CMDB  to  speed 
problem  resolution,  plan  changes,  and  create  more 
detailed  asset  histories  and  audit  trails,  according  to 
BMC. With  Atrium  CMDB,  Remedy  Help  Desk  will  be 
able  to  link  trouble  tickets  directly  to  IT  assets  and 
pre-defined  services. 

Atrium  CMDB  will  collect  and  store  configuration 
data  automatically  from  IT  assets  such  as  Web  and 
application  servers,  routers,  switches  and  end-user 
machines,  BMC  says.The  database  includes  a  recon¬ 


ciliation  engine  that  lets  it  make  sense  of  data  input 
from  multiple  sources  and  model  the  one-to-one, 
one-to-many  and  many-to-many  relationships  that 
exist  among  IT  components. 

The  company  based  Atrium  CMDB  on  the  IT  man¬ 
agement  best  practices  outlined  by  the  Information 
Technology  Infrastructure  Library  (ITIL).  ITIL  says 
that  knowing  what  the  IT  assets  are,  how  they  relate 
to  each  other  and  how  they  might  have  changed 
can  help  network  managers  more  quickly  pinpoint 
the  source  of  an  IT  service  disruption. 

Robert  Molenda,  Remedy  systems  administrator 
and  architect  at  Infineon  Technologies,  a  semicon¬ 
ductor  company  in  San  Jose,  says  using  BMC’s  com¬ 
mon  database  would  fit  nicely  with  his  plan  to  adopt 
other  tenets  of  ITIL,  such  as  change  management. 

“Service  Impact  Manager  coupled  with  a  CMDB 
could  provide  the  graphical  representation  of  the 
topology  in  the  environment.  With  this  analysis,  true 
change  management  can  actually  be  envisioned 
and  realized,"  says  Molenda,  who  plans  to  install  the 
Atrium  CMDB  in  the  near  future. 

Computer  Associates  and  others  also  are  incorpo¬ 
rating  common  databases  across  their  products.  ■ 
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Ford 

continued  from  page  1 

Products  that  let  companies  inte¬ 
grate  wireless  users  with  their 
PBXs  are  lacking,  and  wireless 
coverage  —  inside  and  outside 
buildings  —  can  be  troublesome. 

“We  see  a  high  rate  of  replace¬ 
ment,  up  to  16%,  where  con¬ 
sumers  are  giving  up  their  land¬ 
line  phones  for  wireless,”  says 
Kneko  Burney  chief  market  strate¬ 
gist  for  customer  and  service 
provider  markets  at  In-Stat/MDR. 
“When  we  asked  business  users 
that  make  buying  decisions  for 
their  company  the  same  ques¬ 
tion,  only  5%  indicated  they 
would  even  consider  it.” 

But  Burney  says  that  number 
could  reach  15%  over  the  next 
three  to  five  years  when  more 
small  businesses  opt  for  all-wire- 
less,  and  more  large  businesses 
begin  migrating  departments. 

Ford,  which  has  more  than 
327,000  employees,  isn’t  waiting. 
The  nation’s  No.  2  automaker  has 
already  migrated  800  employees 
from  landlines  to  Sprint’s  wire¬ 
less  service.  That  transition 
occurred  after  Ford  spent  much 
of  the  fourth  quarter  working 
with  Sprint  to  build  out  in-build- 
ing  coverage  in  Ford’s  Dearborn, 
Mich.,  buildings.  It  was  the  most 
challenging  and  time-consum¬ 
ing  part  of  the  rollout,  Lemmer 
says. To  ensure  service  coverage 
and  optimum  reliability  Sprint 
has  deployed  network  infrastruc¬ 
ture  within  Ford’s  facilities. 

“We  are  actually  removing  our 
existing  landlines,  and  the  cell 
phones  will  become  the  primary 
telephony  communication  de¬ 
vice  for  these  employees,” 
Lemmer  says.  “Therefore,  it  was 
important  we  have  a  good  quality 
of  service  before  we  actually  did 
the  deployment.” 

Sprint  also  beefed  up  its  cover¬ 
age  throughout  southeastern 
Michigan  to  ensure  Ford’s  em¬ 
ployees  would  have  reliable  ser¬ 
vice  while  traveling  around  town. 
The  in-building  buildout  was  part 
of  Ford’s  overall  deal  with  Sprint. 

Ford’s  desire  to  improve  com¬ 
munications  between  its  engi¬ 
neers  is  the  main  driver  behind  its 
use  of  Sprint’s  Ready  Link  walkie- 
talkie  feature, along  with  standard 
cellular  service.  Ready  Link  lets 
users  click  a  button  on  the  side  of 
their  phone  to  instantly  access 
other  users  who  are  on  a  direct¬ 
ory  that’s  uploaded  to  each 
phone  before  it’s  issued. 

While  moving  users  exclusively 
to  wireless  phones  might  raise 
concerns  about  excessive  per¬ 
sonal  calls,  Ford  has  a  long-stand¬ 


ing  wireless  use  policy  that  also 
applies  to  these  8,000  employees, 
Lemmer  says. 

Ford  doesn’t  expect  to  migrate 
many  other  employees  to  the 
wireless-only  project.“We  see  it  as 
a  niche  [deployment]  for  certain 
types  of  users  that  are  highly 
mobile,”  Lemmer  says.  The  com¬ 
pany  also  didn’t  consider  cost 
cutting  an  objective. 

“We  were  able  to  look  at  what 
we  are  paying  currently  for  land¬ 
lines  and  pagers  and  felt  that  this 
was  really  a  cost-neutral,  not  a 
cost-saving  opportunity”  says 
Lemmer,  who  declined  to  provide 
cost  details. 

Cost  is  actually  one  of  the  big 
drawbacks  of  migrating  to  an  all¬ 
wireless  environment  today,  says 
Bob  Egan,  president  of  consulting 


firm  Mobile  Competency  “Many 
users  may  not  have  the  leverage 
to  get  out  from  under  bulk-rate 
plans,”  he  says. 

That  translates  to  companies 
paying  much  higher  per-minute 
rates  for  wireless  vs.  wireline 
usage.  “The  industry  average  is 
about  4  to  5  cents  per  minute  for 
wireline  and  about  14  cents  per 
minute  for  wireless.  That’s  a  big 
disadvantage,”  Egan  says. 

Another  challenge  today  is  inte¬ 
grating  wireless  users  with  legacy 
PBX  switches.  In  Ford’s  case,  the 
company  is  putting  that  integra¬ 
tion  on  the  back  burner  because 
it  is  in  the  midst  of  a  large  VoIP 
deployment. 

In  September,  Ford  announced 
one  of  the  largest  VoIP  deploy¬ 
ments,  with  50,000  phones.  SBC 
is  managing  the  $100  million 
project. 

Integrating  wireless  with  Ford’s 
VoIP  and  Centrex  system  will  be 
the  second  phase  of  the  wire¬ 
less  project,  says  Allyn  Phillips, 
manager  of  extranet  infrastruc- 
ture.“We  are  currently  exploring 
that  with  SBC.” 

But  for  2005,  Ford’s  wireless 
users  will  not  have  access  to  typi¬ 


cal  PBX  features  that  most  in  the 
corporate  world  take  for  granted, 
such  as  four-digit  dialing,  call 
transfer  or  call  forwarding.  Users 
still  will  have  features  such  as 
caller  ID  and  voice  mail,  but  they 
will  be  supported  by  Sprint  rather 
than  a  corporate  PBX. 

Products  that  offer  wireless-to- 
PBX  integration  are  not  mature, 
Egan  says.  There  are  a  handful 
that  do  the  job,  but  not  many 
from  which  to  choose.  Mitel 
Communications,  Ascendent 
Telecommunications  and  Ora- 
tive  are  among  the  vendors  that 
make  products  that  let  users 
integrate  their  wireless  phones 
with  their  PBX  or  add  software  to 
wireless  phones  to  have  them 
act  more  like  desktop  phones 
attached  to  a  PBX.  Analysts 


expect  more  choices  in  the  next 
12  to  18  months. 

Despite  Ford’s  desire  to  eventu¬ 
ally  integrate  its  wireless  users 
with  its  VoIP  and  Centrex  sys¬ 
tems,  it  has  no  plans  to  integrate 
wireless  with  the  small  pockets 
of  Wi-Fi  it  has  deployed  in  the 
near  term. 

SMBs  making  the  move 

While  Ford’s  wireline-to-wire- 
less  project  might  be  the  largest 
to  date,  smaller  businesses  also 
are  making  the  transition. 

A  year  ago,  NovaSol,  a  scientific 
research  firm,  moved  its  offices 
in  Honolulu  and  took  that 
opportunity  to  ditch  its  tradition¬ 
al  phones  for  wireless  devices. 

“There  were  multiple  reasons 
for  the  switch,”  says  Jim  Cum¬ 
mings,  director  of  quality  and 
operations  at  the  company.  The 
move  would  cost  the  company 
up  to  $30,000,  which  included 
moving  all  the  phones  and 
wiring  the  new  office  space.  The 
company’s  telephony  expenses 
were  also  high,  Cummings  says. 

“Because  our  customers  are 
folks  like  the  Department  of 
Defense  and  largely  on  the  East 


Coast,  I  was  spending  a  lot  of 
money  on  long-distance  service,” 
he  says. 

That  led  to  a  decision  to 
migrate  all  80  employees  to 
Verizon  Wireless  service. 

While  money  was  a  factor,  it 
wasn’t  the  main  motivator.  Like 
Ford,  NovaSol  wanted  to  increase 
its  communication  capabilities. 

“If  I  have  people  on  the  East 
Coast  at  an  Air  Force  base  and 
they  need  information  right 
away,  calling  our  office  in  Hawaii 
and  getting  someone’s  voice 
mail  is  not  acceptable,”  Cum¬ 
mings  says.  “With  a  five-  to  six- 
hour  time  difference,  that  means 
we  lose  a  da/ 

Although  Cummings  doesn’t 
expect  to  reduce  much  of  his 
telecom  expenses  over  the  next 
five  years  based  on  the  move,  he 
says  “you  just  can’t  put  a  price  on 
the  benefit  of  being  able  to  talk 
to  someone  right  away” 

Like  NovaSol,  Dana  Corp.,  a 
manufacturer  of  products  for 
the  auto  industry,  took  the 
opportunity  to  get  rid  of  some 
of  its  landline  phone’s  when  it 
moved  to  a  new  facility  in 
Auburn  Hills,  Mich. 

Many  of  Dana’s  employees 
already  had  two  phones:  the  one 
on  their  desktop,  plus  a  mobile 
phone.  It  didn’t  make  sense  to 
keep  both,  says  Rich  Henry,  IT 
manager. 

The  policy  within  Dana  is  that 
all  sites  must  connect  to  the 
company’s  main  PBX,  Henry 
says. 

Dana’s  wireless  service  pro¬ 
vider,  Nextel,  provided  Wireless- 
Connect,  a  product  from  Ascend¬ 
ent  that  facilitates  wireless-to- 
PBX  integration.  That  means 
workers  in  Dana’s  headquarters 
in  Toledo,  Ohio,  can  forward  calls 
directly  to  wireless  users  in 
Auburn  Hills,  where  the  com¬ 
pany  assembles  drive  shafts  for 
General  Motors  and  Chrysler. 

The  Ascendent  system  lets 
wireless  users  reach  Dana’s  land¬ 
line  dial  tone,  which  lets  them 
use  four-digit  dialing  to  reach  fel¬ 
low  employees. 

There  are  still  more  than  a 
handful  of  landlines  at  Auburn 
Hills,  Henry  says.  Most  support 
teleconferencing  equipment  in 
conference  rooms. 

While  Henry  likes  the  in¬ 
creased  flexibility  wireless 
phones  offer,  and  the  fact  that 
he  linked  up  to  the  company’s 
main  PBX,  he  says  it’s  not  a 
panacea.  There  are  still  quality 
issues  with  wireless.“It  is  less  reli¬ 
able  than  landline-based  sys¬ 
tems,  but  it  does  seem  to  be  get¬ 
ting  better]’  he  says.  ■ 


Ditching  wireline  for  wireless 

Switching  to  wireless-only  isn’t  a  cut-and-dry  decision. 
Here  are  pros  and  cons: 

Pros: 

Near  constant  contact  with  employees. 

One  phone  to  manage  for  each  user. 

Eliminate  costs  by  removing  voice  landlines. 

Cons: _ 

Per-minute  wireless  service  prices  are  higher  than  wireline. 

Lack  of  mature  PBX  integration  products. 

Questionable  coverage  inside  and  outside  of  buildings. 
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For  sponsorship  opportunities,  call  1-888-239-4505 


April  12-15,  2005  •  JW  Marriott  Desert  Ridge  Resort  •  Phoenix,  Arizona 


Learn  How  to  Achieve 
Storage  Networking  Success 

•  Get  a  Contemporary  Overview  ot  Today’s  Storage  Networking  Issues  and  Opportunities 

•  See  How  to  Implement  and  Deploy  the  Latest  in  Storage  Networking  Technologies 

•  Hear  the  Latest  in  Enterprise  Security 

•  Learn  from  Best  Practices  and  Case  Studies 

Why  You  Should  Attend 

Are  you  responsible  for  managing  your  company's  data  center  assets?  Want  to  exchange  inno¬ 
vative  ideas  and  strategies  with  other  executives  who  share  the  same  objectives?  Then  attend 
Storage  Networking  World,  where  you'll  network  with  and  learn  from  renowned  experts  and  the 
nation's  top  user  executives. 


What  You’ll  Learn 


In  this  executive-forum  setting,  you'll  hear  directly  from  executives  and  managers  in  user 
companies.  They’ll  address  a  wide  variety  of  today’s  burning  issues  like: 


Deploying  Storage  to  Meet  Industry 
Regulations 


Selecting  and  Deploying  Storage 
Networks 

Data  Center  and  Infrastructure 
Considerations 

Storage  Security 

Managing  Storage  Networking  Solutions 

Managing  Deployments  of  Existing  and 
Emerging  Technologies 


CTO  Insights 

Enterprise  Business  Applications 
and  Databases 

Critical  and  Emerging  Technology  Topics 
High  Bandwidth  Storage  Applications 
Small  Medium  Business  Considerations 


See  and  Hear 

Tj  wm  Conrldrc  Leadership  Coach,  Yahoo! 
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The  Likeability  Factor 

There's  a  menace  out  there,  and  it's  slowly  killing  us.  It's  cutting  our  profits.  It's  taking  away 
our  customers,  friends,  and  partners.  It's  ruining  our  health.  It's  shortening  our  lives  and 
making  them  more  unpleasant.  It  causes  relationship  rot  and  kills  our  teams. 

It's  our  L-factor  -  diminished  by  unlikeable  behavior.  Every  person  has  a  likeability  factor 
that  either  helps  him  or  her  win  in  the  game  of  life.  On  a  scale  of  1  to  10,  where  10  is  wildly 
likeable,  and  1  is  despised  by  all  -  too  many  rate  a  3  or  a  4.  Those  with  a  high  L-Factor 
enjoy  overwhelming  success  many  describe  as  “luck”. 

The  practical  impact  of  this  problem  can  be  seen  everywhere.  People  buy  from  sales  people 
they  like,  they  purchase  products  that  they  like  from  companies  with  a  high  L  Factor. 

Doctors  spend  more  time  in  office  visits  with  likeable  people  and  offer  them  more  free 
advice.  Likeable  people  do  better  in  job  interviews  and  receive  higher  merit  raises.  People 
listen  to  likeable  people  more  closely  and  retain  more  information.  Highly  likeable  people 
bring  out  the  best  in  others. 

The  research  is  overwhelming  -  for  personal,  corporate  and  national  success,  we  have  to 
possess  a  sufficient  L-Factor.  Bestselling  author  Tim  Sanders,  has  studied  and  written  about 
this  problem  in  his  second  book  The  Likeability  Factor  (Crown/  Spring  2005),  and  now  has 
the  research-based  program  to  show  audiences  how  to  boost  their  L-Factor  for  greater  suc¬ 
cess  on  all  levels.  This  visionary  presentation  outlines  how  likeability  is  the  key  to  finding 
success  in  relationships,  product  design  and  even  business  life. 
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See  SNWs  Interoperability 
&  Solutions  Demo 

No  other  storage  event  gives  you: 

•  40-plus  SNIA  member  companies 
collaborating  on  integrated  solutions 

•  the  opportunity  to  meet  leading 
experts  and  engineers 


W  IDG  Storage  Analyst  Briefing 

In  this  fast-paced  session,  I  DC's  top  storage  analysts  will 
examine  companies'  growing  interest  in  deploying  tiered 
storage  solutions  and  assess  its  impact  on  storage  compo¬ 
nents,  systems,  networks,  management  and  services. 


For  more  information  and  to  register,  visit  www.snwusa.com/nww  or  call  1-800-883-9090 


For  more  information  and  to  register,  visit  www.snwusa.com/nww  or  call  1-800-883-9090 


Conference  At-a-Glance  (subject  to  change) 


For  details,  updates,  and  to  register  visit  www.snwusa.com/nww 

TUESDAY,  APRIL  12 

9:30am  -  1 1 :30am 

Primer  and  Tutorial  Tracks 

1 1 :30am  -  1 :00pm 

Luncheon 

1 2:00pm  -  5:00pm 

Pre-Conference  Golf  Outing 

1 :00pm  -  6:00pm 

SNIA  Technical  Tutorials 

1 :00pm  -  5:00pm 

IDC  Analyst  Briefing 

7:00pm  -  9:00pm 

Welcome  Reception 

WEDNESDAY, 

APRIL  13 

7:00am  -  8:00am 

Breakfast 

8:00am  -  1 2:00pm 

General  Conference  Sessions 

12:00pm  -  1 :30pm 

Luncheon 

1 :30pm  -  5:30pm 

General  Conference  Sessions 

4:00pm  -  5:30pm 

Concurrent  Sessions 

5:30pm  -  8:30pm 

Expo  with  Dinner  and  Interoperability  &  Solutions  Demo 

THURSDAY,  APRIL  14 

7:00am  -  8:00am 

Breakfast 

8:00am  -  1 2:00pm 

General  Conference  Sessions 

1 2:00pm  -  1 :30pm 

Expo  with  Luncheon 

1 2:00pm  -  7:1 5pm 

Interoperability  &  Solutions  Demo 

1 :30pm  -  3:45pm 

General  Conference  Sessions 

3:45pm  -  5:1 5pm 

Concurrent  Sessions 

3:45pm  -  7:1 5pm 

Expo 

7:30pm  -  9:00pm 

Gala  Evening 

FRIDAY,  APRIL  15 

7:30am  -  8:30am 

Breakfast 

8:30am  -  1 2:00pm 

Concurrent  Sessions 

1 2:00pm 

Conference  Concludes 

LEARN  FROM  USER 
CASE  STUDIES  AND 
PERSPECTIVES 


JOHN  BESCI 

Vice  President, 

Network  Computing  Group, 

Storage  Architecture  &  Optimization 
Bank  of  America 

BOB  LOGAN 

Vice  President, 

Enterprise  Infrastructure  Services 
SAIC 

PAUL  DYKSTERHOUSE 

Director,  Information  Management 
&  Infrastructure 
NDC  Health 


HANK  SIMON 

Web  Services  Technology  Strategist 
Lockheed  Martin 


STEVE  DUPLESSIE 

Founder  and  Senior  Analyst 
Enterprise  Storage  Group 


JON  WILLIAM  TOIGO 

CEO  and  Founder 
Toigo  Partners  International 


ANN  LIVERMORE 

Executive  Vice  President, 
Technology  Solutions  Group 
Hewlett-Packard  Company 
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PAUL  GLEN 

Author  of  Leading  Geeks  and 
Founder  of  C2  Consulting 


Pre-Conference  Golf  Outing 

Complimentary  for  Registered  IT  End-Users 

The  Pre-Conference  Golf  Outing  at  The  Wildfire  SPONSORED  BY 
Golf  Club,  Faldo  Course  located  at  the  JW  j  Quantum 

Marriott  Desert  Ridge  Resort,  is  complimentary  - 

($165  value)  for  registered  IT  End-Users  (other  participants,  including 
sponsors  and  vendors,  may  play  on  an  “as  available’1  basis  and  are 
responsible  for  all  applicable  golf  outing  expenses). 

For  details  contact  Chris  Leger  at  1-508-820-8277 


Hotel  Reservations  and  Travel  Services 

Global  Odysseys  is  the  official  travel  company  for  Storage  Networking  World. 
They  are  your  one-stop  shop  for  exclusive  discounted  rates  on  hotel 
accommodations. 

To  reserve  your  accommodations,  visit:  WWW.etcentfal.COm 
You  can  also  call  our  conference  housing  line  at:  1-888-254-1597 


April  12-15,  2005  •  JW  Marriott  Desert  Ridge  Resort  •  Phoenix,  Arizona 
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Phoenix,  Arizona 


Application  for  Conference  Registration 

Fax  this  completed  application  to  1-508-820-8254  or  apply  online  at:  www.snwusa.com/nww 


Your  business  card  is 
REQUIRED 

to  process  your  application 

Please  affix  your  business  card  to  this  space  prior  to 
submitting  your  application.  Applications  submitted 
without  business  cards  will  not  be  processed. 

Questions?  Call  1-800-883-9090 


If  not  indicated  on  your  business  card, 
please  provide  the  following  required 
information: 


Corporate  Email  Address 


Corporate  Website 

Registration  questions? 

Call  1  -800-883-9090  or  email 
snwreg@computerworld.com 

Need  accommodations? 

Reserve  them  at:  www.etcentral.com 

Or  call  1-888-254-1597 
or  email:  eventhousing@globalodysseys.com 


Please  check  ONE  of  the  following: 


Earlybird  Registration  (through  February  28,  2005) 


Full/Onsite  Registration  (after  February  28,  2005) 


Q  I  am  an  IT  End-User* 

(Complete  Attendee  Profile  below) 


□  $895  General  Conference  Package  (April  1 3  &  14) 

(includes  General  Conference  Sessions,  Expo,  Meals  &  Receptions) 

□  $1,290  Total  4-Day  Package  (April  12,  13,  14,  15) 
(includes  General  Conference,  plus  Technical  and  Business  Tracks, 
SNIA-produced  Tutorials,  SNIA-Certification  ■Test-Ready"  Courses) 


□  $1,295  General  Conference  Package  (April  13  &  14) 

(includes  General  Conference  Sessions,  Expo,  Meals  &  Receptions) 

□  $1,690  Total  4-Day  Package  (April  12,  13,  14,  15) 
(includes  General  Conference,  plus  Technical  and  Business  Tracks, 
SNIA-produced  Tutorials,  SNIA-Certification  “Test-Ready"  Courses) 


*  IT  End-Users  are  defined  as  those  who  are  attending  Storage  Networking  World  with  an  intent  (and  an  IT  spending  budget)  to  potentially  buy/lease  hardware/software/services,  etc  from  our  conference  sponsors  and  are  not  themselves  an  fT  vendor.  As  such, 
account  representatives,  business  development  personnel,  analysts,  consultants  and  anyone  else  attending  who  does  not  have  IT  purchasing  influence  within  their  organization  are  excluded  from  the  "IT  End-User"  designation.  Interpretation  and  enforcement  of 
this  policy  are  at  the  sole  discretion  of  Computerworld. 


□  I  am  a  Channel  Partner/ 
Integrator/Consultant 

(Complete  Attendee  Profile  below) 


□  $3,000  Total  4-Day  Package  (April  12,  13,  14,  15) 
(includes  General  Conference;  Technical  and  Business  Tracks, 
SNIA-produced  Tutorials,  SNIA  Certification  “Test-Ready"  Courses) 


□  $3,500  Total  4-Day  Package  (April  12,  13,  14,  15) 
(includes  General  Conference;  Technical  and  Business  Tracks, 
SNIA-produced  Tutorials,  SNIA  Certification  “Test-Ready"  Courses) 


By  participating  in  SNWs  Channel  Partner/integrator  registration  package,  registrants  may  enjoy  the  following  benefits:  One  company  representative  may  receive  a  full  conference  pass  to  SNW  Spring  2005;  additional  company 
representatives  pay  $695  each  for  full  conference  passes;  company  may  invite  up  to  five  IT  User  customers  to  attend  SNW  SpringOT  Users  must  be  strictly  compliant  with  IT  User  definition  on  the  supplied  registration  form); 
companies  registenng  for  this  package  interested  in  joining  the  SN IA  are  eligible  to  receive  a  $2,000  discount,  provided  that  membership  is  applied  for  pridr  to  March  1 , 2005. 


Attendee  Profile:  This  section  MUST  be  completed  by  IT  End-Users  and  Channel  Partners/Integrators/Consultants  only  (optional  for  all  other  registrations)  in  order  to  process  your  application. 


Your  Business/Industry 

□  Aerospace 

□  Manufacturing  &  Process  Industries  (non-computer  rela 

□  Finance/Banking/Accounting 

□  Insurance/Real  Estate/Legal  Sevices 

□  Government:  Federal  (including  Military) 

□  Government:  State  or  Local 

□  Health/Medical/Dental  Services 

□  Retailer/Wholesaler/Distributor  (non-computer  related) 

□  Transportation/Utilities 

□  Communication  Carriers 

(ISP,  Telecom,  Data  Comm,  TV/Cable) 

□  Construction/Architecture/Engineering 

□  Data  Processing  Services 

□  Education 

□  Agriculture/Forestry/Fisheries 

□  Mining/Oil/Gas 

□  Travel/Hospitality/Recreation/Entertainment 

□  Publishing/Broadcast/ Advertising/ 

Public  Relations/Marketing 

□  Research/Development  Lab 

□  Business  Services/Consultant  (non-computer  related) 

□  Manufacturing  of  Computers,  Communications, 
Peripheral  Equipment  or  Software 


Your  Job  Title/ Function: 

IT  MANAGEMENT 

□  CIO,  CTO.  CSO 

□  Executive  VP.  Senior  VP 

□  Vice  President 

□  Director 

□  Manager/Other  IT  Manager 

□  Supervisor 

BUSINESS  MANAGEMENT 

□  CEO,  COO,  Chairman,  President 

□  CFO,  Controller,  Treasurer 

□  Executive  VP,  Senior  VP,  VP,  General  Manager 

□  Director,  Manager 

□  Other  Corporate/Business  Manager 

Number  of  employees  in  your  entire  organization 
(ALL  locations) 

□  20,000  or  more 

□  10,000  -  19,999 

□  5.000  -  9,999 

□  1,000-4,999 

□  500  -  999 

□  100-499 

□  50  -  99 

□  Less  than  50 


What  is  your  organization’s  annual  IT/IS  budget 
for  all  IT/IS  products? 

□  $  1  Billion  or  more 

□  $500  Million  -  $999,9  Million 

□  $100  Million  -  $4999  Million 

□  $50  Million  -  $99.9  Million 

□  $10  Million  -  $49.9  Million 

□  $1  Million  -  $9.9  Million 

□  $500,000  -  $999,999 

□  $250,000  -  $499,999 

□  $100,000  -  $249,999 

□  Less  than  $100,000 

What  is  the  estimated  annual  revenue  of 
your  entire  organization? 

□  Over  $  1 0  Billion 

□  $1  Billion  -  $9.9  Billion 

□  $500  Million  -  $999  Million 

□  $100  Million  -  $499  Million 

□  Less  than  $100  Million 


The  one  item  that  best  describes  your  Involvement  In 
the  IT  purchase  process 

□  Authorize/approve  purchase 

□  Evaluate/recommend  products,  brands,  vendors 

□  Specify  features/technical  requirements 

□  Set  budget  for  expenditures 

□  Determine  need  to  purchase 

□  Create  IT  strategy 

□  All  of  the  above 

Would  you  like  to  receive  information  about  playing  in 
the  golf  outing  on  Tuesday,  April  1 2th? 

□  Yes 

□  No 

Do  you  need  hotel  accomodations? 

□  Yes  (please  visit  www.etcentral.com  to  reserve) 

□  No 

Would  you  like  to  receive  a  complimentary 
subscription  to  Computerworld? 

□  Yes 

□  No 


□  My  company  is  Sponsoring/ 
Exhibiting  at  SNW 


□  $895  (through  February  28,  2005) 

General  Conference  Package  (April  1 3  &  14) 

(includes  General  Conference  Sessions,  Expo,  Meals  &  Receptions) 


□  $1,295  (after  February  28,  2005) 

General  Conference  Package  (April  1 3  &  14) 

(includes  General  Conference  Sessions,  Expo,  Meals  &  Receptions) 


□  $1,290  Total  4-Day  Package  (April  12,  13,  14,  15) 

(includes  General  Conference,  plus  Technical  and  Business  Tracks, 

SNIA-produced  Tutorials,  SNIA-Certification  “Test-Ready"  Courses) 

As  a  sponsor,  you  may  be  eligible  to  attend  using  a  registration  provided  with  your  sponsorship.  (If  those  registrations  have  already  been  assigned/used,  then  you  may  register  at  the  prevailing  rates  above.)  See 
the  current  list  of  sponsors  at  www.snwusa.com.  Questions?  Call  1-800-883-9090  or  email  snwreg@computerworld.com. 


□  $1,690  Total  4-Day  Package  (April  12,  13,  14,  15) 
(includes  General  Conference,  plus  Technical  and  Business  Tracks, 
SNIA-produced  Tutorials,  SNIA-Certification  “Test-Ready"  Courses) 


Q  lama  representative  of  a  Non-Sponsoring  IT  Vendor  Company 

Q  $5,000  Business  Development  Professionel  Package  for  Sales,  Marketing  and  Business  Development  Professionals  (includes  General  Conference  Sessions,  Expo,  Meals  &  Receptions) 


Vendors  are  encouraged  to  participate  in  Storage  Networking  World  through  sponsorship.  (Details  are  available  by 
calling  Ann  Harris  at  508-8208667.)  Alternatively,  vendors  (as  well  as  other  “non-U  end-user"  professionals  as 
defined  by  Computerworld),  may  apply  for  registration  at  the  “non-sponsoring  vendor”  rate  of  $5,000.  Determination 
of  what  constitutes  a  “non-sponsoring  vendor"  registration  is  made  exclusively  by  Computerworld. 

Please  call  888-239-4505  with  questions. 


I  am  a  Financial/Equity  Analyst  and/or  Venture  Capital  Professional 

□  $1,290  (through  February  28,  2005)  □  $1,690  (after  February  28,  2005) 

General  Conference  Package  General  Conference  Package 

(includes  General  Conference  Sessions,  (includes  General  Conference  Sessions, 

Expo,  Meals  &  Receptions)  Expo,  Meals  &  Receptions) 


I  am  a  qualified  member  of  the  press.  I  can  verify  my  press  credentials. 
Press  should  call  Marenghi  Public  Relations  at  1-781-915-5000  to  register. 

Please  fax  this  completed  application  to  1-508-820-8254 


Payment  Method 

□  Check  (checks  must  be  received  by  March  21, 2005  payable  to:  Computerworld) 
Mail  to:  Computerworld,  Attn:  Michael  Meleedy,  One  Speen  Street,  Framingham,  MA  01701 

□  American  Express  □  VISA  □  MasterCard 

Account  Numb^ _ 

Expiration  Date: _ 

Card  Holder  Name: _ . 

Signature  of  Card  Holder: _ 

Cancellation  Policy  (All  of  the  following  require  written  notification  by  March  2 1 ,  2005.) 

In  the  event  of  cancellation,  the  registrant  has  three  options: 

1 )  He  or  she  may  substitute  another  attendee  for  this  conference. 

2)  He  or  she  may  transfer  this  registration  to  the  Storage  Networking  World  Fall  2005  conference. 

3)  The  registration  fee  will  be  refunded,  less  a  $250  service  charge  (if  written  notice  is  received  by  March  21 , 2005). 

Please  send  cancellation  requests  via  email  to:  snwreg@computerworld.com 


■  VOIP  ■  WIRELESS  LANS 


■  Polycom  is  scheduled  to  announce 
this  week  an  entry-level  set-top  video- 
conferencing  endpoint  and  new 
Session  Initiation  Protocol-enabled 
conference  phone.  The  VSX  6000, 
which  costs  about  $5,000,  is  an  IP-only 
video  endpoint  that  supports  H.264 
(better  video,  less  bandwidth),  has 
built-in  Advanced  Encryption  Stand¬ 
ard  encryption  and  contains  audio/ 
video  error  concealment  technology 
found  in  Polycom’s  higher-end  prod¬ 
ucts.  The  new  SoundStation  IP 
4000  looks  like  Polycom’s  traditional 
triangle-shaped  conference  phone  but 
runs  over  one  cord  and  combines 
power  and  network  connectivity,  sup¬ 
ports  DHCP  and  has  a  built-in  ad¬ 
dress  book.  It  costs  about  $11,000. 

■  IBM  later  this  month  plans  to  start 
shipping  Nortel  Layer  2/3  copper 
and  Fibre  Gigabit  Ethernet 
switching  modules  designed  specif 
ically  for  BladeCenter.  IBM  says  the 
integrated  switches  give  users  better 
traffic  routing  and  security  capabili¬ 
ties  within  the  blade  chassis.  The 
switches,  which  connect  to  the  blade 
servers  via  14  Gigabit  Ethernet  ports 
in  the  chassis,  each  provide  six  links 
to  outside  networks.  Up  to  four  of  the 
switches  can  fit  in  the  chassis,  and 
they  can  be  hot-plugged  into  Blade- 
Center  without  disruption.  The  Layer 
2/3  copper  switch  module  starts  at 
about  $2,300,  and  the  Fibre  module 
starts  at  about  $4,000. 

■  3Com  this  week  is  releasing  a  fiber 
version  of  its  Network  Jack  product 
—  a  mini  Ethernet  switch  that  fits 
into  wall  jacks  on  office  or  cubicle 
walls.  The  new  NJ240FX  consists  of 

a  four-port,  SNMP-manageable 
switch  and  a  connection  for  a  two- 
strand  fiber  uplink  cable.  This  can  let 
users  with  all-fiber  network  drops 
split  out  LAN  connections  for  multi¬ 
ple  devices,  such  as  PCs,  IP  phones 
or  cameras.  The  NJ240FX,  powered 
by  an  AC  adapter,  also  can  deliver 
802.3af  Power  over  Ethernet  to  one 
port  on  the  Network  Jack  for  power¬ 
ing  phones  or  other  devices.  The 
NJ240FX  costs  $380. 


Foundry  pumps  up  10G  offerings 


Straight  to  the  core 

Foundry’s  new  chassis-based  Fastlron  Edge  Switch  is  intended  for  a 
new  type  of  two-tier  LAN  architecture,  which  eliminates  a  layer  of 
switch  equipment. 


PCs  with  Gigabit  Ethernet 
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O  With  more  aggregate  bandwidth  coming  from  the  ©  ■  •  •  Foundry  says  users  can  increase  network 
LAN  edge  via  PCs,  Gigabit  Ethernet  PCs . . .  performance  and  simplify  management  by  eliminating 

the  LAN  distribution  layer  and  tying  wiring  closets  to 
the  core  with  10G  Ethernet. 


■  BY  PHIL  HOCHMUTH 

Foundry  Networks  this  week  is  expected 
to  launch  a  new  series  of  lower-cost,  mod¬ 
ular  switches  aimed  at  customers  that  want 
to  speed  10G  adoption  in  their  business 
networks. 

For  organizations  with  ballooning  desk¬ 
top  bandwidth  needs,  Foundry’s  SuperX 
switches  could  provide  high-density  10/ 
100/1000M  bit/sec  ports  with  Power  over 
Ethernet  (FbE)  on  the  end-user  side,  with 
10G  Ethernet  uplinks  for  connecting  dir¬ 
ectly  to  a  LAN  backbone  switch.  The 
SuperX  boxes  also  can  come  configured  as 
high-density,  10G  aggregation  or  LAN  core 
devices,  Foundry  says. 

The  SuperX  chassis  come  in  three  flavors: 
Fastlron,  Turboiron  and  Biglron,  aimed  at 
wiring  closets,  10G  aggregation  and  back¬ 
bone  deployments,  respectively  While  the 
switches  can  pack  high  switching  capacity 
and  port  densities,  Foundry  says  the  chassis 
are  compact,  fitting  into  6U  vertical  space. 

The  SuperX  Fastlron  can  be  deployed  in 
wiring  closets,  where  large  amounts  of  10/ 
100/1000  ports  are  needed  —  up  to  96 
ports  can  be  supported  per  chassis.  A  $500 
daughtercard  also  can  be  added  to  each 
24-port,  triple-speed  module  for  adding 
FbE.  Dual-port  10G  uplink  cards  also  can 
be  used  to  link  a  wiring  closet  to  a  distrib¬ 


ution  or  core  switch. 

The  SuperX  Turboiron  is  a  pre-configured 
chassis  with  16  ports  of  10G  Ethernet  and  is 
targeted  at  aggregating  multiple  10G 
switches. 

While  Foundry  is  pushing  bigger  band¬ 
width  into  a  small  chassis,  it’s  also  pushing 


its  10G  pricing  on  the  SuperX  series,  down 
to  about  $2,500  per  port,  without  optics. 
This  comes  in  at  about  $1,000  less  than 
recently  announced  10G  pricing  from 
Extreme  Networks  and  $4,500  less  than 
Cisco. 

See  Foundry,  page  18 


Vontu  takes  first  step  to  block  e-mail 


■  BY  ELLEN  MESSMER 

Vontu  this  week  announced  it  is  adding 
an  e-mail-blocking  capability  to  its  content¬ 
monitoring  software  to  help  customers 
detect  unauthorized  transmission  of  sensi¬ 
tive  corporate  data. 

Vontu  4.0  is  Intel-based  server  software 
that  includes  Vontu  Monitor  for  watching 
all  outbound  communications  for  sensi¬ 
tive  corporate  data  based  on  user  policies 
set  in  Vontu’s  Manager  program.The  fourth 
version  of  the  software  adds  Vontu  Pro¬ 
tect,  a  server-based  mail  agent  that  checks 
outbound  e-mail  to  block  attempts  to 
send  out  sensitive  information  such  as 
customer  lists,  Social  Security  numbers  or 
financial  data. 

According  to  Joseph  Ansanelli,  CEO  at 
Vontu,  the  mail-blocking  component  can 
stop  outbound  messages  suspected  of  vio¬ 
lating  policy  and  direct  them  to  an  admin¬ 


istrator  for  review  or  to  an  encryption  pro¬ 
cessor  as  an  additional  security  measure. 

Vontu  Prevent  can  look  at  about  200  file 
formats  such  as  Microsoft  attachments 
and  graphics.  Vontu  anticipates  that  an 
organization  of  20,000  employees  would 
probably  require  two  or  three  mail-block¬ 
ing  Vontu  servers. 

Vontu  Prevent  won’t  block  other  types  of 
communications  beyond  e-mail  such  as 
Web  or  instant  messaging.  But  Vontu  says  it 
intends  to  offer  products  for  this  type  of  traf¬ 
fic  in  the  future. 

Vontu,  which  counts  Charles  Schwab  and 
Prudential  among  its  customers,  faces 
competition  in  content  filtering  from  Veri- 
cept,  Reconnex,  Tablus,  Verdasys  and  Vidi- 
i us, says  Rick  Mogull.an  analyst  at  Gartner. 

By  adding  e-mail  blocking  to  its  next 
product,  Vontu  also  is  competing  against 
e-mail  gateway  providers  Proofpoint  and 
MessageGate.  In  the  future,  Vontu  might 


compete  against  companies  that  special¬ 
ize  in  instant-messaging  blocking,  such  as 
IMlogic,  Akonix  and  FaceTime  Communi¬ 
cations.  In  blocking  access  to  the  Web, 
Vontu  will  be  coming  up  against  vendors 
such  as  Websense  and  SurfControl. 

The  point  is  that  monitoring  and  blocking 
of  outbound  communications  is  likely  to 
coalesce  into  more  unified  products  in  the 
future,  Mogull  says. 

“We  see  this  as  one  of  the  more  promis¬ 
ing  areas  of  growth  this  year;”  Mogull  says, 
adding  that  the  need  to  ensure  data  pri¬ 
vacy  and  regulatory  compliance  for  rules 
such  as  Sarbanes-Oxley  and  the  Health 
Insurance  Portability  and  Accountability 
Act  is  spurring  companies  to  look  at  mon¬ 
itoring  outbound  communications. 

Expected  to  ship  later  this  quarter,  Vontu 
4.0  costs  $20  per  year,  per  user,  for  monitor¬ 
ing,  with  an  additional  $10  per  user  for 
Vontu  Prevent.  ■ 
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Barracuda  device  guards  outgoing  e-mail 


■  BY  CARA  GARRETSON 

Barracuda  Networks  last  week  released  a 
new  version  of  its  anti-spam  appliance  that 
prevents  unwanted  e-mail  and  viruses  from 
being  sent  out  of  a  corporate  network 
while  keeping  sensitive  data,  trade  secrets 
and  other  company  information  inside  the 
organization. 

The  Barracuda  Spam  Firewall  Outbound 
Edition  scans  an  organization’s  outbound 
e-mail  to  ensure  senders  aren’t  spreading 
viruses  or  blasting  spam,  says  CEO  Dean 
Drako.The  new  appliance  uses  many  of  the 
same  techniques  found  in  Barracuda’s 
Spam  Firewall  for  incoming  mail, but  is  not 
integrated  with  that  product  to  maintain 
the  integrity  of  outgoing  mail  in  case  in¬ 
coming  mail  experiences  a  problem,  and 
vice  versa.“Any  IT  guy  who  knows  what  he’s 
doing  will  separate  the  inbound  [stream  of 
e-mail]  from  the  outbound,”  Drako  says. 

Designed  for  both  corporate  and  ISP  use, 
the  appliance  sits  at  the  edge  of  the  net¬ 
work  and  scours  outgoing  mail  for  viruses 
using  a  number  of  techniques  including 
dual-layer  virus  blocking  and  attachment 
blocking  based  on  file  types,  Drako  says. 

To  prevent  spam  from  emanating  from  a 
corporate  network,  the  new  spam  firewall 
scans  outgoing  mail  for  keywords  that  are 


■  BY  GRANT  GROSS 

Sun  last  week  announced  a  Java-based 
product  designed  to  make  it  easy  for  com¬ 
panies  to  switch  from  tagging  their  prod¬ 
ucts  with  traditional  bar  codes  to  radio  fre¬ 
quency  identification  technology 

Sun,  which  announced  its  Java  RFID  soft¬ 
ware  in  July  unveiled  its  Sun  Java  System 
RFID  Tag  and  Ship  product,  an  entry-level 
RFID  product  targeted  at  suppliers  that 
comply  with  RFID  mandates  from  retailers 
including  Wal-Mart,  Target  and  the  U.S. 
Department  of  Defense. 

RFID  Tag  and  Ship  lets  companies 
quickly  convert  bar  code  tags  to  RFID  tags, 
saysVijay  Sarathy,  director  of  RFID  product 
marketing  and  strategy  at  Sun. The  product 
lets  companies  comply  with  RFID  man¬ 
dates  without  major  investments  in  new 
RFID  systems.  Sun  will  announce  the  price 
of  Tag  and  Ship  shortly,  and  the  product  will 
be  available  this  quarter. 

RFID  Tag  and  Ship  also  includes  a  Sun 
W2100z  workstation  and  monitor,  the  Sun 
Java  System  RFID  Software,  a  Printronix 
RFID  printer,  an  RFID  reader  and  a  bar¬ 
code  reader.  RFID  Tag  and  Ship  includes 
on-site  hardware  and  software  configura¬ 
tion  and  user  training. 


E-mail  bonanza 

Corporate  e-mail  accounts  for 
83%  of  worldwide  e-mail  traffic, 

which  in  2004  totaled  76.8  billion 
messages  per  day,  according  to 
The  Radicati  Group. 


often  contained  in  spam  messages  and  uti¬ 
lizes  rate  controls  to  alert  the  IT  staff  when 
an  e-mail  address  attempts  to  send  out  a 
large  quantity  of  messages.This  is  usually  a 
sign  that  a  PC  has  been  taken  over  by  mal¬ 
ware  and  turned  into  a  spam  server. The 
firewall  alerts  the  IT  department  before  the 
bulk  e-mail  is  sent  out  so  the  messages  can 
be  blocked,  Drako  says. 

CC  Communications,  a  telecom  pro¬ 
vider  in  Fallon,  Nev.,  uses  the  Barracuda 
Spam  Firewall  Outbound  Edition  to  pre¬ 
vent  its  Internet  service  users  from  send¬ 
ing  viruses  and  spam  to  each  other  and 
out  onto  the  Internet, says  network  admin¬ 
istrator  Gene  Ponce. 

“We  wanted  to  hopefully  prevent  other 
domains  and  companies  from  blacklisting 
our  domains  and  from  preventing  delivery 
of  e-mail  from  our  customers  to  theirs  due 


Sun  also  announced  a  new  Sun  RFID 
Reference  Architecture  and  plans  to  create 
RFID  Industry  Solution  Architectures  (ISA) 
specifically  designed  for  industries  includ¬ 
ing  government,  manufacturing,  pharma¬ 
ceutical  and  retail.  Sun  and  SeeBeyond 
Technology  outlined  plans  for  a  forthcom¬ 
ing  RFID  ISA  for  Retail,  which  will  offer  an 
integrated  RFID  offering  designed  specifi¬ 
cally  for  retailers. 

Sun’s  RFID  Reference  Architecture  is  a 
methodology  designed  to  help  companies 
identify  design  and  build  RFID  systems 
using  Sun  technology  and  third-party  appli¬ 
cations.  The  Sun  RFID  Reference  Archi¬ 
tecture  is  based  on  RFID  best  practices  and 
methodologies,  addressing  performance 
and  scalability  for  tracking  RFID  product 
movement,  according  to  Sun.  Using  the 
architecture,  customers  can  expect  to  re¬ 
duce  their  overall  implementation  costs, 
the  company  says. 

Sun  has  promoted  using  Java  on  RFID 
readers  as  a  standard  that  can  be  used  on 
various  brands  of  readers, Sarathy  says.  Java 
software  lets  companies  “plug  and  play” 
RFID  readers  into  any  RFID  system,  he  says. 

Gross  is  a  correspondent  with  the  IDG 
News  Service. 


to  spam  from  our  domains,”  Ponce  says.The 
company,  which  won’t  specify  how  many 
Internet  service  users  it  has  other  than  to 
say  “thousands,”  plans  to  add  another 
Barracuda  Spam  Firewall  Outbound 
Edition  to  its  corporate  network  to  monitor 
for  spam  and  viruses,  and  to  help  imple¬ 
ment  company  e-mail  policies. 

Barracuda’s  outbound  product  also  is 
designed  to  help  companies  comply 
with  recent  regulations  and  corporate 
policies  regarding  what  information  can 
leave  the  organization.  Through  scan¬ 
ning,  filtering,  keyword  searches  and 
attachment  blocking,  companies  can  use 
the  firewall  to  ensure  employees  don’t 
send  out  proprietary  information, such  as 
intellectual  property  or  trade  secrets, 
Drako  says. 

Using  these  techniques,  the  firewall  also 
can  help  ensure  companies  that  are  regu- 


Foundry 

continued  from  page  17 

The  University  of  Southern  California’s  In¬ 
formation  Sciences  Institute  (USC  ISO  de¬ 
ployed  a  beta  version  of  the  SuperX  Turbo- 
Iron  and  tested  it  for  aggregating  links  from 
several  lOG-enabled  Foundry  switches  al¬ 
ready  in  production.The  switches  connect 
supercomputing  clusters  inside  the  re¬ 
search  center. 

“It  used  to  be  just  a  few  years  ago  when 
you  paid  over  $40,000  for  a  single  10G 
Ethernet  port,”  says  Richard  Nelson,  direc¬ 
tor  of  computing  at  USC  ISI,who  has  used 
10G  since  before  it  became  a  standard  in 
2002.  Nelson  says  the  SuperX  Turboiron 
box’s  price  of  about  $5,000  per  10G  port, 
with  optics, “is  pretty  good.” 

He  says  the  SuperX  switches’  compact 
size  also  would  be  helpful  in  a  wiring 
closet  deployment. 

“It’s  not  a  very  big  box,”  he  says.“It  can  fit 
into  a  lot  of  different  locations,  such  as 
small  wiring  closets  that  might  already  be 
packed  with  equipment.” 

The  third  SuperX,  the  Biglron  model,  also 
can  be  deployed  with  a  mix  of  blades,  from 
10/100/1000  to  multiple  10G  modules.  Like 
the  other  two  SuperX  switches,  it  supports 
up  to  510G  bit/sec  of  total  capacity  But  the 
Biglron  version,  which  is  meant  as  a  back¬ 
bone  switch,  also  can  handle  a  routing 
table  four  times  the  size  of  the  Fastlron  and 
Turboiron  versions. 

The  broad  support  for  triplespeed  con¬ 
nections  with  FoE  is  another  attribute  of 
the  SuperX  series  that  should  appeal  to  net¬ 
work  architects,  says  Max  Flisi,  an  analyst 
with  IDC. 

“FbE  is  sort  of  moving  from  a  nice-to-have 
feature  to  a  must-have  requirement,”  Flisi 
says.  Broader  use  of  IP  telephones,  which 
require  power  from  a  switch  connection, 
and  Wi-Fi  access  points  are  among  top  dri¬ 
vers  for  FbE,  he  adds. 

The  10G  pricing  for  the  SuperX  series  also 


lated  by  federal  laws  such  as  Gramm- 
Leach-Bliley,  the  Health  Insurance  Port¬ 
ability  and  Accountability  Act  (HIPAA), 
and  Sarbanes-Oxley  are  in  compliance. 
When  scanning  outgoing  e-mail,  the  fire¬ 
wall  can  be  trained  to  look  for  and  block 
e-mails  and  attachments  that  contain  in¬ 
formation  regarding  health  records  or  in¬ 
surance  data  that  HIPAA  protects. 

The  Barracuda  Spam  Firewall  Outbound 
Edition  is  available  in  five  different  mod¬ 
els,  depending  upon  the  number  of  users 
in  an  organization.  It  costs  between 
$1,400  and  $20,000,  with  no  per-user 
licensing  fees.The  appliance  can  handle 
up  to  30,000  active  users  and  1.5  million 
e-mails  per  day,  and  can  be  clustered 
together  for  large  organizations. 

The  firewall  competes  with  other  out¬ 
bound  e-mail  products  such  as  those 
from  IronPort  and  Proofpoint.  ■ 


could  make  10G  more  attractive  to  corpo¬ 
rate  network  executives,  whereas  10G 
adoption  has  been  mostly  with  high-pow¬ 
ered  R&D  organizations. 

Dual-port  10G  blades  for  the  SuperX 
boxes  start  at  about  $6,000,  or  $3,000  per 
port  without  optics.  With  Foundry’s  entry- 
level  optic  modules,  the  price  comes  in  at 
about  $5,000  per  port  —  or  about  $2,000 
per  Gigabit. 

“There  is  a  shift  underway  from  Fast 
Ethernet  to  Gigabit  at  the  desktop,”  Flisi 
says.'And  in  parallel  with  that,  we’re  seeing 
the  beginnings  of  10G  Ethernet  uptake,” 
which  will  be  needed  to  aggregate  con¬ 
nections  as  Gigabit  desktops  become  more 
prevalent. 

With  its  SuperX  switches,  Foundry  is  tar¬ 
geting  two  recently  announced  switches 
from  Cisco  and  Extreme:  Cisco’s  Catalyst 
4500  with  Supervisory  10G  module, an¬ 
nounced  last  month  (see  www.nwfusion 
.com,  DocFinder:  5434),  and  Extreme’s  As¬ 
pen  series  of  wiring  closest  chassis,  an¬ 
nounced  this  month  (see  DocFinder: 
5435).  On  a  performance  comparison, 
Foundry  says  the  SuperX  switches  are 
slightly  lower  in  price  than  Catalyst  4500, 
but  the  SuperX  provides  five  times  as  much 
total  bandwidth  (510G  bit/sec,  compared 
to  the  Catalyst’s  136G  bit/sec  fabric). 
Compared  with  Extreme’s  Aspen,  both 
Foundry  and  Extreme’s  switches  have  com¬ 
parable  bandwidth,  but  the  Foundry  offer¬ 
ing  is  about  $37,000  less  expensive, 
Foundry  says. 

However,  Extreme  offers  redundant 
switch  fabrics  in  its  Aspen  switch  as  stan¬ 
dard,  and  fast  failover  software.  Cisco  also 
has  a  redundant  option  on  the  Catalyst 
4500  with  the  Supervisory  10G.  Foundry 
says  redundant  management  is  not  avail¬ 
able  on  the  SuperX  series,  but  could  be 
added  later. 

The  SuperX  Fastlron  and  Turboiron 
switches  are  available  now,  while  the 
SuperX  Biglron  will  be  available  in  March. ■ 


Sun  announces  Java  RFID 
product,  architecture 
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EMC  CLARiiON®  CHANGES  THE  WAY  YOU  THINK  ABOUT  STORAGE.  Your  information  and  applications 
will  be  there  when  you  get  back.  But  some  of  the  hassles  of  managing  them  will  be  gone  forever.  Th~ 
new  CLARiiON  CX  series  makes  your  online  information  safer  and  gives  you  simple,  powerful  management 
software.  Network  flexibility  for  SAN  or  NAS.  Scalable  solutions  starting  below  $10,000.  To  learn  more, 
visit  www.EMC.com/backup.  Or  call  1-866-464-7381. 

Find  an  authorized  EMC  Velocity2  Partner  at  www.EMC.com/velocity. 
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"We  have  3,000  PCs  based  everywhere  from 
Argentina  to  Vietnam,  and  now  our  team  can 
update  them  all  from  headquarters." 

Viktor  Portmann 

Project  Manager,  Department  of  Foreign  Affairs,  Switzerland 


Make  a  name  for  yourself  with  Windows  Server  System. 

Microsoft  Windows  Server  System  makes  it  easier  for 
Switzerland's  Federal  Department  of  Foreign  Affairs 
(DFA)  to  manage  the  infrastructure  serving  their 
embassies  and  consulates  in  156  countries.  Here's 
how:  By  using  Systems  Management  Server  2003 
and  Microsoft  Operations  Manager  2005,  DFA  can 
automatically  update  its  500  remote  servers  from  a 
central  location,  saving  over  $600,000  in  travel 
expenses  alone  in  the  past  year.  They've  also  been 
able  to  reduce  the  time  and  cost  of  maintenance, 
boost  user  productivity,  and  find  the  time  to  better 
prepare  for  expansion.  Software  that's  easier  to 
manage  is  software  that  helps  you  do  more  with 
less.  To  get  the  full  DFA  story  or  to  find  a  Microsoft 
Certified  Partner,  go  to  microsoft.com/wssystem 
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Windows  Server  System™  includes: 


Server  Platform  Windows  Server™ 


Virtualization 

Virtual  Server 

Data  Management  &  Analysis 

SQL  Server™ 

Communications 

Exchange  Server 

Portals  &  Collaboration 

Office  SharePoint'  Portal  Server 

Integration 

BizTalk*  Server 

Management 

Systems  Management  Server 

Microsoft'  Operations  Manager 

Security 

Internet  Security  &  Acceleration  Server 

Plus  other  software  products 
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Spam  and  virus  protection  at  an  affordable  price. 


•  No  per  user  license  fees 

•  Prices  starting  at  $1399 

•  Powerful,  enterprise-class  solution 
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Barracuda  Spam  Firewall 
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^Copyright  2004,  Barracuda  Networks,  Inc..  All  rights  reserved.  Reclaim  Your  Email, and  Barracuda  Spam  Firewall  are  either 
trademarks  or  registered  trademarks  of  Barracuda  Networks,  Inc.  and/or  it  subsidiares  in  the  United  States  and/or  other  countries. 


POWERFUL 


EASY  TO  USE 


AFFORDABLE 


Aggressive  Reseller  Program 

Get  more  info  by  visiting  www.barracudanetworks.com/RSA 
or  by  calling  1 -888-ANTI-SPAM  or  408-342-5400 


Veritas  refreshes  back-up  software 


■  BY  DENI  CONNOR 

Veritas  Software  last  week  announced 
upgraded  back-up  software  for  Windows 
and  NetWare  networks,  showing  that  it  isn’t 
standing  still  just  because  it’s  in  the  middle 
of  being  acquired  by  Symantec. 

Backup  Exec  10,  a  product  with  a 
decade-plus-long  history  boasts  improved 
capabilities  for  dealing  with  incremental 
backups  and  data  mirroring. 

The  software,  designed  for  companies 
with  1 ,000  or  fewer  end  users,  includes  the 
ability  to  support  what  storage  vendors  call 
synthetic  backups.  This  means  that  a  full 
backup  on  disk  can  be  created  from  incre¬ 
mental  backups.  Such  backups  provide  for 
easier  and  quicker  data  and  file  retrieval, 
Veritas  says. 

Another  new  feature  lets  companies  off¬ 
load  back-up  processing  from  Windows 
and  NetWare  application  servers  to  storage 
systems  where  data  is  mirrored.  The  mir¬ 
rored  data  volume  is  mounted  on  a  back¬ 
up  server,  where  the  data  can  be  saved  to  a 
tape  library  This  cuts  down  on  network  traf¬ 
fic  by  not  requiring  the  application  servers 
to  shuttle  data  back  and  forth  to  the  stor¬ 
age  medium  and  tape  library, Veritas  says. 

Veritas  also  added  a  central  management 
console  called  the  Central  Administration 
Server  Option  to  Backup  Exec.The  console 
lets  administrators  monitor  and  manage 


back-up  operations  in  data  centers  and  re¬ 
mote  offices  and  create  back-up  sched¬ 
ules,  the  company  says  (see  graphic,  right). 

Mike  Menard,  systems  and  data  adminis¬ 
trator  for  Stanley  Aviation  in  Aurora,  Colo., 
uses  the  console  to  manage  its  data  pro¬ 
tection  on  27  servers  in  two  remote  offices. 
Previously  he  had  to  install  back-up  soft¬ 
ware  at  remote  locations  and  send  staff  to 
those  locations  to  back  up  the  data. 

“I  can  now  use  Backup  Exec’s  central 
management  console  and  attach  to  a 
server  at  the  remote  location  and  manage 
the  backup  of  its  data  from  the  data  cen¬ 
ter,”  he  says. 

Veritas  also  has  introduced  a  suite  that 
includes  Backup  Exec  software  plus  the 
company’s  Replication  Exec  (formerly 
Storage  Replicator)  and  Storage  Exec 
(formerly  StorageCentral).  Replication 
Exec  copies  data  from  remote  offices 
either  continually  or  on  a  scheduled 
basis  to  a  centralized  location.  Storage 
Exec  provides  quota  management, 
blocks  files  by  type  and  reports  on 
storage  operations. 

Backup  Exec  Suite  is  expected  to  com¬ 
pete  with  a  team  of  products  EMC  will 
announce  later  this  month  that  will 
include  Legato  Networker  and  Dantz 
Retrospect. 

A  new  Backup  Exec  SmartLink  technol¬ 
ogy  also  lets  users  back  up  and  archive 


On  the job 


A  sampling  of  how  Veritas’  Backup  Exec 
Central  Administration  Server  Option  works. 


From  the  task  bar,  an 
administrator  can  schedule 
jobs,  set  policies  and  report 
on  job  success. 
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data  from  Storage  Exec  reports  and  view 
the  status  of  replication  efforts.  Veritas  also 
has  added  support  for  remote  Linux  and 
Unix  servers. 


Backup  Exec  10  starts  at  $895.  Replicator 
Exec  starts  at  $1,500,  and  Storage  Exec 
starts  at  $795.  The  Backup  Exec  Suite 
begins  at  $4,280.  ■ 


In  looking  up  a  reference  to  something 
I’d  written  some  years  ago,  I  came  across 
an  article  from  the  Jan.  17, 2000,  issue  of 
Network  World.  It  began:  “Microsoft  last 
week  began  what  could  be  the  most  dra¬ 
matic  metamorphosis  of  its  25-year  history” 
(see  www.nwfusion.com,  DocFinder: 
5429). 

Yes,  it  was  five  years  ago  this  month  that 
Bill  Gates  handed  over  the  title  of  Microsoft 
CEO  to  Steve  Ballmer,  while  retaining  the 
title  of  chairman  of  the  board,  and  writing 
chief  software  architect  on  his  business 
cards.  Because  Gates  had  been  the  com¬ 
pany’s  only  CEO  up  until  that  time,  many 


Meet  the  new  boss,  same  as  the  old  boss? 


were  poised  to  see  what  changes  the  new 
CEO  might  bring. 

In  the  Wired  Windows  column  for  Feb.  1 
that  year,  I  wrote,  “Does  anyone  really 
believe  that  installing  Steve  Ballmer  as  CEO 
of  Microsoft  will  actually  change  anything 
that  happens  in  Redmond?”  Surprisingly, 
some  people  did.  Not  so  surprising,  though, 
it  didn’t  actually  come  to  pass. 

Gates  said  the  move  would  give  him 
more  time  to  focus  on  technologies.  But  it 
wasn’t  being  tied  to  the  office  as  CEO  that 
kept  Gates  from  dabbling  in  technology 
but  his  worldwide  gallivanting  from  trade 
show  to  government  meeting  to  school 
room  to  disaster  site  as  the  chief  banner- 
waver  for  Microsoft  technology  And  that 
hasn’t  changed  at  all. 

Some  speculated  at  the  time  that  the 
move  was  more  in  response  to  the  then- 
ongoing  anti-trust  lawsuit  rather  than  to 
any  business  need.  Events  over  the  past  five 


years  seem  to  have  proven  this  correct. 

Gates  still  is  setting  a  peripatetic  pace  as 
a  globe-trotter,  and  Microsoft  technological 
advancement  still  can  cause  him  acute 
embarrassment  as  the  computer  crashes 
during  his  Consumer  Electronic  Show 
keynote  address  demonstrate. 

More  telling,  though,  is  the  fact  that  Gates 
remains  the  chief  (some  might  say  the 
sole)  spokesperson  for  Microsoft.  Ballmer 
has  made  his  mark  on  the  internal  organi¬ 
zation  of  the  company  and  the  business 
unit  structure  largely  reflects  his  thinking 
and  style.  But  that  reorganization  is  some¬ 
thing  he  already  was  charged  with  doing 
as  COO,  I’d  expect,  and  anyone  who  thinks 
it  happened  without  Gates’  imprimatur  is 
sadly  mistaken. 

As  the  French  have  said  for  many  years, 
“plus  ca  change,  plus  c’est  la  meme  chose” 
—  “the  more  things  change,  the  more  they 
stay  the  same.”  Very  little  has  changed  in 


Redmond,  but  we’ll  check  back  in  five 
years  down  the  road. 

Kearns,  a  former  network  administrator,  is 
a  freelance  writer  and  consultant  in  Silicon 
Valley.  He  can  be  reached  at  wired@ 
vquill.com. 


Tip  of  the  Week 


Fantafree  pass  to  this 
year’s  Novell  BrainShare 
conference?  Tech-sessions 
|  records  and  sells  copies  of  the 
t  conference  sessions  and  needs 
|  folks  to  help.  Contact  chris 
.nevener@networkingpartner, 
com  if  you're  interested. 


Blade  vendors  sharpen  focus  on  management 


■  BY  JENNIFER  MEARS 

As  companies  in  growing  numbers  consider  blade 
servers  to  handle  critical  business  workloads,  they 
are  looking  beyond  the  power  and  space  savings 
they  can  get  and  are  demanding  more  when  it  comes  to 
the  tools  to  manage  these  compact  systems. 

From  the  beginning,  these  stripped-down  servers  —  typi¬ 
cally  consisting  of  a  single  board,  memory  and  CPU  — 
have  been  touted  for  the  ease  with  which  systems  can  be 
deployed,  provisioned  and  managed. 

But  management  tools  have  been  limited  in  large  part 
because  blades  have  been  deployed  as  separate  entities 
that  could  not  hook  directly  into  —  or  be  managed  along 
with  —  existing  data  center  infrastructures.  Most  vendors 
offered  pass-through  boards  or  other  approaches  to  con¬ 
nect  into  legacy  network  infrastructure. 

That  is  beginning  to  change  with  vendors  such  as  HP 
and  IBM  integrating  storage  and  network  switches  into 
their  blade  chassis.  More  integrated  hardware  combined 
with  a  move  to  put  more  critical  workloads  onto  the 
blades  and  a  growing  interest  in  modular,  scale-out  com¬ 
puting  —  in  which  smaller  servers  act  as  a  single  com¬ 
pute  resource  —  is  resulting  in  a  demand  for  increasingly 
sophisticated  management  capabilities,  analysts  say 
In  a  2004  IDC  report  that  discussed  the  movement  of 
blades  into  the  mainstream,  analysts  said  that  system 
management  software  will  play  an  important  role  in  mov¬ 
ing  more  blades  into  enterprise  data  centers. 

“Rapid  advancement  in  system  management  software, 
clustering  technology,  and  the  continued  disaggregation 
of  servers  into  smaller  form  factors  and  components  are 
expected  to  fuel  the  growth  of  server  blades  and  modu¬ 
lar  systems,”  the  analysts  wrote. 

On  the  rise 

Blade  adoption  already  is  on  the  rise:  Shipments  more 
than  doubled  between  2003  and  2004,  growing  from 
nearly  185,000  units  in  2003  to  more  than  450,000  last 
year.  IDC  expects  about  1.4  million  blade  servers  will 
ship  in  2006,  accounting  for  about  40%  of  the  overall 
server  market. 

Raymond  Decrescente,  CTO  for  the  Capital  Region 
Orthopedic  Group  in  Albany  N.Y,  turned  to  HP  blades  in 
2003  when  the  practice  transitioned  from  a  paper-based 
medical  records  system  to  an  electronic  one.  He  says  the 
fact  that  blades  are  designed  to  be  deployed  in  clusters 
and  that  faulty  systems  can  be  swapped  out  without  dis¬ 
rupting  workloads  enabled  him  to  create  a  powerful, 
highly  available  environment. 

“Easier  management  is  more  time  efficient  and  time  is 
mone/  Decrescente  says.“Blades  and  central  stor¬ 
age  allow  for  a  space  saving  solution  that  better  lends 
itself  to  high  availability  architectures.  Blades  produce 
less  heat,  use  less  energy,  are  hot  swappable. ...  If  you  are 
deploying  several  servers  or  maybe  installing  a  ground¬ 
up  data  center,  you  need  to  look  at  blade  technology 
Decrescente  plans  to  bring  in  more  blades  and  says 
he’s  happy  with  the  management  tools  he  has,  but  is 
always  looking  for  improvement.  He  would  like  to  see 
faster  responding,  integrated  lights-out  capabilities, 
which  let  users  virtually  monitor  and  manage  the  blades 


Blade-buying  basics 

Factors  to  consider  when  blade  shopping: 

•  Management:  All  the  vendors  have  recognized  that 
management  features  will  be  a  key  differentiator.  While 
most  vendors  offer  basic  patch  management, 
configuration  and  provisioning  tools,  consider  whether 
capabilities  such  as  virtualization,  business-based 
workload  balancing  and  power  management  will  be  key 
for  your  deployment  and  find  a  vendor  heading  in  that 
direction. 

•  Market  shifts:  Dell’s  re-entry  into  the  market  will 
drive  down  prices,  forcing  vendors  to  compete  on  more 
than  hardware.  Look  closely  at  what  vendors  offer  in 
terms  of  management,  and  in  areas  such  as  network 
and  storage  integration. 

•  More  power:  IDC  has  seen  a  shift  in  customer 
demand  from  one-processor  blades  to  two-  and  four- 
processor  systems,  indicating  that  users  are  putting 
more  critical  applications  on  blade  platforms. 
Understand  exactly  where  blades  will  benefit  you  in 
your  data  center. 


from  a  single  point  regardless  of  the  server’s  state. 

Analysts  say  users  can  expect  to  see  enhancements 
to  that  kind  of  basic  management  feature,  but  that 
vendors  also  will  start  giving  blades  more  advanced 
management  capabilities.  Look  for  areas  such  as  vir¬ 
tualization  and  power  management,  and  software 
that  makes  it  easier  to  manage  blades  in  conjunction 
with  network,  storage,  applications  and  other  server 
hardware. 

An  integrated  story 

“Management  has  to  become  integrated,  and  there  will 
be  more  of  that  happening,”  says  Audrey  Rasmussen,  a 
vice  president  at  Enterprise  Management  Associates  and 
author  of  Network  World's  “Network/Systems  Manage¬ 
ment”  newsletter.“It’s  about  taking  a  look  at  the  work¬ 
loads  on  some  of  these  servers  and  being  able  to  man¬ 
age  workloads  based  on  business  priorities.  It’s  really 
starting  to  become  more  of  an  integrated  approach  to 
management  where  it’s  not  just  looking  at  a  server  as  an 
individual  entity,  but  really  as  a  combined  compute 
resource.” 

To  move  in  that  direction,  systems  vendors  need  to 
make  it  easier  for  users  to  integrate  blade  hardware  into 
their  infrastructures.  IBM  has  focused  on  that  for  some 
time,  and  last  spring  announced  that  it  was  integrating 
Brocade  Communications  and  Cisco  switches  into 
BladeCenter,  IBM’s  blade  server  line. 

In  the  fall,  IBM  went  a  step  further  and  said  that  it  was 
opening  hardware  specifications  to  BladeCenter  to 
make  it  easier  for  third  parties  to  develop  network  inter¬ 
face  cards  and  other  adapters  for  the  blades. 

Looking  ahead,  the  focus  is  on  opening  IBM 
Director,  the  management  software  for  BladeCenter,  so 
that  third  parties  more  easily  can  hook  their  manage¬ 
ment  tools  into  the  IBM  Director  framework. 


“It’s  the  idea  of  trying  to  get  down  to  a  single  con¬ 
sole,”  says  Rob  Sauerwalt,  global  brand  manager  for  soft¬ 
ware  and  service  offerings  for  IBM’s  eServers. 

HP  is  heading  in  that  direction,  as  well.  In  September, 
HP  revamped  its  approach  to  blades,  forming  a  group 
that  combines  server,  services  and  management  soft¬ 
ware  expertise  to  help  users  create  integrated  environ¬ 
ments  on  blades.  Called  BladeSystem,  HP’s  new  blade 
offerings  include  management  and  virtualization  tools 
to  automate  tasks  and  improve  utilization. 

Going  forward,  HP  will  focus  on  enhancing  virtualiza¬ 
tion  on  blades  and  integration  with  third-party  manage¬ 
ment  tools.  But  the  bottom  line  is  to  create  one  manage¬ 
ment  interface  where  policies  can  be  set  to  automate 
how  workloads  are  distributed  across  a  group  of  blades, 
says  Lee  Johns,  senior  software  director  in  HP’s  software 
global  business  unit. 

“Simplicity  is  the  kejf  he  says.“The  company  that  makes 
it  easiest  to  manage  blades  will  win  in  this  market.” 

A  shifting  market 

Blade  management  is  where  RLX  Technologies  hopes 
to  shine. The  blade  pioneer  late  last  year  announced 
that  it  was  scrapping  its  hardware  business  to  focus  on 
management  software  as  a  result  of  growing  competitive 
pressure  from  HP  IBM,  Sun  and  now  Dell,  which  re 
entered  the  market  in  November. 

“We’re  well  known  for  our  management  software  and 
that’s  where  the  play  is  going  to  be  for  us,”  says  Doug 
Erwin,  CEO  of  RLX. 

Analysts  aren’t  surprised  by  RLX’s  decision,  but  say 
that  it  will  be  important  for  RLX  to  find  a  major  vendor 
willing  to  replace  its  own  management  tools  with  RLX 
Control  Tower.  RLX  is  close  to  landing  a  deal  with  a 
major  computer  company  to  offer  Control  Tower  on  its 
blades  and  rack-dense  servers,  Erwin  says.  Dell  is  specu¬ 
lated  to  be  the  company  but  neither  RLX  nor  Dell  would 
comment. 

Either  way,  with  a  large  OEM  pushing  Control  Tower, 
RLX  might  be  in  a  good  position  as  management 
tools  become  more  important  in  the  market. 

While  blades  largely  have  been  used  for  Web  serving 
and  high  performance  computing,  companies  now  are 
starting  to  look  at  blades  as  a  viable  platform  for  more 
critical  business  applications,  such  as  ERP  and  data¬ 
bases,  says  Jessica  Yang,  an  analyst  at  IDC. 

At  the  same  time,  the  cost  of  the  systems  is  heading 
down,  especially  with  Dell  now  in  the  market.  But  the 
systems  still  command  a  price  premium.  Gartner  esti¬ 
mates  that  blades  cost  about  10%  more  than  compara¬ 
ble  1U  servers.  IDC  says  that  the  gap  is  closing  with 
blades  representing  a  cost  savings  if  users  bring  in  at 
least  four  systems. 

As  the  blade  market  becomes  commoditized  and  as 
users  put  more  business-focused  applications  on  those 
servers,  systems  vendors  will  have  to  differentiate 
themselves  on  the  management  tools  they  provide, 
analysts  say. 

“Operational  aspects  are  really  why  people  buy  into 
blades  in  the  first  place,”  HP’s  Johns  says.“If  you  don’t 
deliver  on  that  promise,  then  you’re  not  delivering  on 
the  true  value  of  blades.”* 
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Lessons  from  leading  users 


YMGA  builds  extensive  online  community 


■  BY  DENISE  DUBIE 

For  more  than  150  years,  YMCAs 
have  popped  up  in  U.S.  cities  to 
bring  people  together  and  provide 
communities  with  shared  health  and 
social  service  resources.  And  this  year, 
an  online  community  will  emerge  to 
help  the  2,575  YMCAs  across  the  U.S. 
better  share  information  and  improve 
communication  between  employees, 
volunteers  and  each  other. 

Since  the  first  Young  Men’s  Christian 
Association  was  founded  in  Boston  on 
Dec.  29, 1851,  the  not-for-profit  organiza¬ 
tion  has  flourished, serving  the  needs  of 
about  19  million  men,  women  and  chil¬ 
dren  in  10,000  communities.  Because 
each  community  is  different,  each 
YMCA  exists  autonomously  and  tends 
to  address  different  health  and  social 
service  needs  with  services  for  its  mem¬ 
bers.  While  each  YMCAs  mission 


remains  the  same  —  to  provide  com¬ 
munities  with  much-needed  resources 
—  the  means  with  which  the  organiza¬ 
tions  need  to  carry  out  this  mission  had 
to  change. 

Enter  the  YMCA  of  USA  (Y-USA). 

IT  executives  at  Y-USA  in  Chicago,  a 
national  resource  for  the  U.S.  YMCAs, 
saw  an  opportunity  to  bring  the  dis¬ 
parate  facilities  together  and  help 
them  share  information  and  resources 
to  better  serve  their  respective  commu¬ 
nities.  While  most  people  are  familiar 
with  YMCA  community  centers  — 
which  provide  members  with  educa¬ 
tional  training,  hands-on  activities  and 
physical  fitness  resources  —  the  Y-USA 
realized  it  also  needed  to  establish 
an  online  community  for  its  member 
organizations. 

“Because  each  YMCA  was  contracting 
Web  sites  individually,  we  couldn’t  get  a 

See  YMCA,  page  26 


Go  to  the  YMCAexchange 

YMCA  of  USA  underwent  a  content  management  overhaul  to  link  its 
nationwide  locations  via  an  online  community  intranet. 


O  Using  their  Web  browsers, 
YMGA  content  editors  post 
static  and  dynamic  content 
through  a  secure  interface  (ID 
and  password)  with  the  third- 
party  content  management 
service  provider,  Atomz. 


©  Once  approved,  YMGA  Web  pages 
are  sent  to  Atomz  data  center, 
its  Publish  application  pushes  the 
content  to  live  Web  servers 
supporting  the  YMCA  extranet. 
The  content  management  system 
also  updates  any  pages  related 
to  the  new  content. 


©  YMCA  staff  and  volunteers 
nationwide  can  log  on  to  the 
organization’s  Web  site, 
YMCAexchange,  and  use  it  as  their 
own  corporate  intranet  to  access 
information  regarding  training, 
employee  benefits  and 
organization-wide  events. 


Vendor  extends  patch 
tools  to  Linux,  Unix 


Takes 

■  Microsoft  by  mid-2006  plans  to 
release  a  new  version  of  its  BizTalk 
Server  business  integration  soft¬ 
ware,  offering  support  for  SOL  Server 
2005  and  simplified  management, 
among  other  features.  BizTalk  Server 
2006,  formerly  known  as  Pathfinder, 
succeeds  BizTalk  Server  2004.  BizTalk 
Server  is  designed  to  help  users  inte¬ 
grate  applications  and  automate  busi¬ 
ness  processes.  The  product  com¬ 
petes  with  packages  from  vendors 
including  IBM,  BEA  Systems  andTibco 
Software.  BizTalk  Server  2006  will 
have  a  new  management  console  and 
improved  support  for  management, 
monitoring  and  software  deployment. 
Microsoft  also  plans  to  provide  sup¬ 
port  for  its  SOL  Server  2005  database, 
Visual  Studio  2005  development  tool 
and  Virtual  Server  2005.  There  will  be  a 


BizTalk  Server  2006  for  systems  with  x86 
processors  with  64-bit  extensions,  as  well 
as  increased  integration  with  SharePoint 
Services.  Microsoft  has  not  issued  a  ship 
date  or  pricing  for  the  new  software. 

■  SAP  last  week  began  offering  a  mainte¬ 
nance  and  migration  service  aimed  at  its 
customers  that  run  PeopleSoft  and  J.D. 
Edwards  applications.  The  offer,  called 
SAP  Safe  Passage,  extends  mainte¬ 
nance  and  support  services  to  products 
from  PeopleSoft  and  the  company  it 
acquired  in  2003,  J.D.  Edwards,  SAP  said. 
Customers  already  using  or  planning  to 
license  SAP’s  new  flagship  ERP  software, 
mySAP  ERP,  also  will  be  able  to  take 
advantage  of  the  incorporated  SAP 
NetWeaver  integration  platform,  which 
includes  connectors  for  PeopleSoft  and 
J.D.  Edwards  applications,  according  to 
SAP.  SAP  will  charge  customers  a  main¬ 
tenance  fee  of  17%  of  the  original  pur¬ 
chase  price  of  their  PeopleSoft  and  J.D. 
Edwards  software  licenses. 


■  BY  JOHN  FONTANA 

Patch  management  vendor  New  Bound¬ 
ary  Technologies  is  expanding  the  range  of 
its  software  beyond  Windows  to  answer 
user  demands  for  cross-platform  support 
that  will  address  vulnerabilities,  regardless 
of  where  they  exist  on  the  network. 

Prism  Patch  Manger  6.3  features  support 
for  Red  Hat  Linux  and  Solaris,  as  well  as 
Windows  versions,  from  NT  to  the  latest  XP 
desktop,  and  Windows  Server  2003. 

“Usually  with  larger  enterprises  you  have 
many  different  systems  so  you  need  to  fig¬ 
ure  out  how  to  manage  all  of  them,”  says 
Jasmine  Noel,  a  principal  with  Ptak,  Noel 
and  Associates.“It’s  no  good  to  secure  your 
Microsoft  system  if  you  have  a  Linux  or 
Unix  system  with  a  gaping  hole.” 

On  top  of  cross-platform  support,  New 
Boundary  also  is  adding  an  uninstall  fea¬ 


ture  and  support  for  Microsoft  Visio  and 
Project.  The  software  also  includes  new 
management  controls  for  grouping 
machines  for  those  users  who  are  not 
using  Active  Directory 

Users  are  beginning  to  recognize  that 
patch  management  is  key  to  their  security 
goals.  Savvy  companies  are  beginning  to 
make  patch  tools  part  of  a  larger  process 
that  includes  a  set  of  internally  developed 
policies  and  procedures  to  ensure  known 
vulnerabilities  are  resolved  before  they 
can  be  exploited.  The  result  is  configura¬ 
tion  management,  asset  management  and 
network  management  vendors  adding 
patching  to  their  tool  suite. 

New  Boundary  —  along  with  Shavlik 
Technologies,  BigFix,  PatchLink  and  other 
pure-play  patch  management  vendors  — 
is  finding  this  domain  a  crowded  one 
See  New  Boundary,  page  23 
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Apple  has  wowed  the  popular  press 
yet  again  with  its  announcement  of 
a  sub-$100  iPod  and  a  sub-$500  Mac¬ 
intosh  computer. 

Apple’s  market  share  in  computers 
does  not  match  the  level  of  attention  the 
company’s  new  product  announcements 
get. This  mismatch  has  been  the  case  for 
years:  Lots  of  press  but  little  success 
(except  in  the  eyes  of  a  few  of  us  die¬ 
hard  supporters),  until  the  iPod  came 
along.  Even  with  the  iPod,  the  press  way 
underestimated  its  potential,  saying  it 
was  cute  but  too  expensive  for  the  func¬ 
tion  and  too  limited  in  only  working  with 
iTunes,  and  anyway,  the  big  boys,  like 
Microsoft  and  Sony  would  soon  take  over 


A  handful  of  Unix 

the  market.  Unlike  much  of  the  coverage 
about  the  announcements,  I  focused  on 
the  computer,  not  the  music  box. 

A  while  back  I  wrote  that  Apple  OS  X 
was  more  than  a  pretty  face  —  the  pretty 
face  is  on  a  Unix  bod  (see  www.nwfu 
sion.com,  DocFinder:  5431).  The  Unix 
part  of  OS  X  has  continued  to  get  better 
in  the  more  than  two  years  since  that 
article.  Not  better  as  in  “more  reliable,” 
because  it  was  already  just  about  as  reli¬ 
able  as  an  operating  system  can  get  (I 
now  have  more  than  15  computer-years 
of  OS  X  experience  on  my  various  com¬ 
puters  with  one  crash  in  that  time,  and 
that  crash  might  have  been  from  a  power 
glitch).  But  “better,”  as  in  more  complete. 

OS  X  now  ships  with  more  than  1,000 
Unix  applications,  and  the  Fink  (http:// 
fink.sourceforge.net)  and  DarwinPorts 
(http://darwinports.opendarwin.org) 
efforts  each  have  added  about  2,000 
applications  (with  some  overlap),  most 
originally  written  for  Linux. 


Apple  now  has  brought  out  a  full-bore 
Unix  computer  that  can  fit  in  your  hand 
(assuming  you  have  a  big  hand).  The 
same  computer  also  can  put  on  the  Mac 
pretty  face,  but  doesn’t  need  to  if  you  just 
want  a  Unix  server  or  medium-power 
workstation.  1  say  medium-power  some¬ 
what  advisedly,  because  the  new  Mac 
mini  has  far  more  power  than  any  Unix 
workstation  I  used  a  few  years  ago.  The 
Mac  mini  also  can  operate  without  a  dis¬ 
play  or  keyboard  (once  configured)  as  a 
network-based  server  you  can  access 
with  the  Web  (an  Apache  Web  server  is 
included)  or  securely  over  the  ’Net  (an 
Secure  Shell  server  is  also  included).  For 
example,  I’m  about  to  order  a  Mac  mini 
to  use  as  a  server  for  my  new  Epson  4000 
printer. 

This  is  not  the  first  very  small  and  inex¬ 
pensive  Unix-like  computer.  A  number  of 
companies  have  been  selling  even 
smaller  Linux-based  boxes  for  a  number 
of  years.  But  as  far  as  I  know,  the  Mac 
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mini  is  the  first  Unix  computer  from  a 
major  manufacturer  (if  Apple  can  be 
called  that)  to  be  this  small  and  cheap. 
This  is  a  full  multi-user  operating  system 
and  reasonably  speedy  computer  for 
$100  more  than  a  40G-byte  iPod,  $200 
less  than  the  single-server  license  that 
The  SCO  Group  wants  for  the  intellectual 
property  rights  it  claims  in  Linux,  or  just 
$200  more  than  Windows  XP 
Professional  by  itself.  A  company  like  HP 
could  do  a  lot  worse  than  to  re-label  Mac 
minis  as  its  basic  Unix  workstation  core 
like  HP  already  re-labels  iPods. 

Unix  by  the  handful  —  a  great  idea. 

Disclaimer:  According  to  its  neighbors, 
Harvard’s  handfuls  are  rather  big  indeed, 
but  the  above  promo  for  the  Mac  mini 
handful  is  my  own  opinion  —  not  the 
university’s. 

Bradner  is  a  consultant  with  Harvard 
University’s  Information  Systems.  He  can 
be  reached  at  sob@sobco.com. 
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Lessons  from  Leading  Users 


handle  on  how  much  was  being  spent 
on  content  management  or  how  to  sup¬ 
port  them,”  says  Marie  Lynch,  director  of 
operations  at  Y-USA. 

About  two  years  ago,  her  IT  group 
decided  to  revamp  how  YMCAs  use 
technology  to  manage  content  from 
employee  benefits  to  volunteer  training 
to  scheduled  activities.  The  YMCA- 
exchange  would  serve  as  a  corporate 
intranet  or  extranet  —  to  store  informa¬ 
tion  and  manage  content  about  facili¬ 
ties  as  well  as  share  data  with  other 
facilities  through  user  logon  ID  and 
password-protected  access  to  the  online 
community  —  the  Y-USA  envisioned. 

“Most  of  the  facilities  maintained  a  lot 
of  paper  records,  and  some  of  them 
didn’t  establish  a  Web  presence  other 
than  for  basic  information.  We  wanted 
to  provide  a  consistent  online  location 
for  all  the  facilities  to  use," she  says.“We 
had  an  online  presence  with  the  public, 
but  we  didn’t  have  that  same  type  of 
centralized  location  for  our  members.” 

To  start,  Lynch  says  the  group  surveyed 
YMCAs  to  discover  what  they  would  be 
willing  to  contribute  to  a  centralized 
content  management  system.  More  than 
500  individuals  completed  the  survey 
offering  their  likes  and  dislikes  of  the 
former  intranet.  In  addition,  80  YMCA 
professionals  from  across  the  country 
participated  in  the  development  and 
design  stage  to  work  on  the  “wish  lists” 
created  from  the  survey  Following  the 
positive  response  to  the  idea,  Lynch’s 
team  began  the  more  difficult  process 


of  breaking  down  the  separate  efforts  to 
build  an  online  community.  To  do  this, 
Y-USA  requested  participating  locations 
allocate  3%  of  their  varied  operating 
budgets  toward  a  centralized  IT  budget 
that  the  Y-USA  would  administer.  The 
group  also  reduced  the  number  of 
planned  IT  projects  from  100  to  20,  by 
sharing  resources  from  a  centralized 
source. 

The  first  group  project  the  shared  dol¬ 
lars  would  fund  was  the  YMCA- 
exchange,  which  the  group  rolled  out  in 
four  stages,  the  final  of  which  will  be 
completed  this  month. The  group  didn’t 
start  entirely  from  scratch. Y-USA  hosted 
an  intranet  in  the  past,  but  it  was  not  a 
combined  effort  supported  by  central 
funds. 

Y-USA  contracted  a  consulting  firm, 
Tahoe  Partners,  and  a  content  manage¬ 
ment  service  provider,  Atomz,  to  get  this 
Web  site  up  and  running  quickly. 
According  to  Rich  Whitney  IT  director  at 
Y-USA,  the  group  had  to  buy  one  new 
Web  server  to  be  installed  at  its  location 
in  Chicago,  which  would  let  Y-USA  staff 
members  post  content  by  connecting  to 
Atomz  data  center  using  secure  FTP 
Atomz  would  host  the  IT  environment 
needed  to  publish  new  content. 

“We  felt  we  could  get  the  site  up  on 
deadline  by  outsourcing  rather  than 
developing  the  technology  in-house,” 
Whitney  says. 

But  the  bigger  challenge,  according 
to  Lori  Niforatos,  YMCAexchange  pro¬ 
ject  manager,  lay  in  getting  the  thou¬ 
sands  of  people  accustomed  to  post¬ 
ing  content  on  their  respective  sites  to 
sit  back  and  let  Y-USA  take  over  the  edi¬ 
torial  responsibilities.  She  says  it  was 
difficult  to  change  processes  among 


17,000  staff  and  585,000  volunteers. 

The  group  whittled  down  the  number 
of  people  who  could  post  content 
between  the  Y-USA  and  YMCAs'  staff  to  ,  | 
about  50,  and  appointed  five  others  to 
edit  the  proposed  content  before  it  was 
sent  to  Atomz  for  publishing. 

“It  was  a  paradigm  shift  from  provid¬ 
ing  communications  via  print  to  doing 
it  electronically.  Even  though  we  had 
some  methods  before,  the  way  the 
organization  viewed  sharing  content 
changed,”  Niforatos  says. 

Since  the  launch  of  the  first  phase  in 
May  2004,  Y-USA  officials  say  staff  and 
volunteer  usage  of  the  Web  site  has 
increased  77%.  PDF  downloads  of 
employment  forms,  training  forms, 
membership  forms  among  others  from 
the  site  also  have  increased.  In  the 
past,  different  branches  would  use  dif¬ 
ferent  formats,  and  now  they  standard¬ 
ized  on  PDFs  to  let  people  to  get  their 
information  in  a  consistent  fashion. 
Before  the  launch  of  the  site,  about 
41,000  documents  would  be  down¬ 
loaded  per  day  compared  with  about 
113,000  after  rolling  out  the  upgraded 
intranet. 

As  for  new  features,  the  third  phase, 
launched  Nov.  30,  2004  included 
redesigned  content  areas  for  family 
strengthening  and  technology  manage¬ 
ment,  and  legal  and  risk  management. 

YMCA.net  eventually  will  provide  the 
public  with  similar  access  to  its 
resources  and  information.  An  organiza¬ 
tion  with  19  million  members  should 
have  an  interactive,  intuitive  Web  pres¬ 
ence,  Lynch  says. 

“We  are  using  the  lessons  learned 
from  this  project  to  redesign  our  public 
site,”  she  says.  ■ 


New  Boundary 
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these  days.  Microsoft  is  expected  to  intro¬ 
duce  new  patch  tools  later  this  year, 
including  a  free  server  called  Windows 
Update  Services. 

New  Boundary  says  its  cross-platform 
support,  and  support  for  Microsoft  operat¬ 
ing  systems  and  applications,  gives  it  an 
attractive  set  of  tools. 

Prism  Patch  Manager,  which  works  in 
agent  or  agent-less  mode,  supports  Red 
Hat  Linux  and  Solaris.  Its  Windows  sup¬ 
port  extends  from  the  operating  system 
into  Microsoft  applications  such  as  SQL 
Server,  Exchange  and  Office. 

The  new  rollback  feature  in  6.3  ensures 
that  any  system  can  be  returned  to  a 
known  and  good  configuration  if  prob¬ 
lems  with  a  patch  arise. 

“The  rollback  was  one  feature  that  we 
were  lagging  on,”  says  Kim  Pearson,  CEO 
of  New  Boundary.  “Another  key  was  get¬ 
ting  into  Linux  and  Solaris.” 

Prism  also  lets  users  scan  their  network 
by  IP  range,  which  lets  users  who  do  not 
use  Microsoft’s  Active  Directory  create 
groups  of  machines  they  can  target  with 
specific  patch  deployments. 

The  management  console  for  Prism 
Patch  Manager  6.3  also  has  been  upgrad¬ 
ed  to  let  administrators  manage  from  one 
console  multiple  Prism  patch  reposito¬ 
ries,  which  is  a  proprietary  database 
developed  by  New  Boundary 

The  software  also  has  been  translated 
into  Swedish  and  Chinese  versions. 

Prism  Patch  Manager  6.3  costs  $11  per 
user,  per  100  users.  ■ 
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WITH  THE  DS  SERIES,  YOU  ARE  ALWAYS  IN  CONTROL. 

Local  data  centers.  Remote  offices.  Branch  locations.  They  are  all  within  your  reach.  The  company  who 


invented  KVM  over  IP  just  made  it  better. 

No  more  trips  back  to  the  office.  With  the  all  new  DSView®3  software,  you  can  control  servers 
and  serial  devices  from  a  single  browser  interface  -  you  can  even  power  cycle  or  watch  the  servers 
reboot.  Since  we  load  balance  user  authentication  for  multiple  sites,  you  get  faster  performance  and 
quick  access. 

You  know,  you  might  even  be  able  to  take  lunch.  For  a  virtual  tour  of  secure,  smarter  switching  from 
Avocent,  go  online  to  www.avocent.com/control  or  call  1-866-286-2368. 


Avocent: 


The  Power  of  Being  There® 


Avocent,  the  Avocent  logo,  DSView  and  The  Power  of  Being  There  are  registered  trademarks  of  Avocent  Corporation.  Copyright  ©  2005  Avocent  Corporation. 
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THE  JOURNEY  OF  THE  LEADER 

in  Layer  4-7  Load  Balancing  Switches,  performance.  Intelligence.  Security.  Price. 


Serverlron® — when  it  comes  to  Layer  4—7  load  balancing,  there  is  no  summit!  Just  a  continuous  journey.  Foundry’s  Serverlron 
switches  continue  to  be  the  trailblazer  for  server  scalability  with  one  accomplishment  after  another.  Serverlron  switches  protect 
servers  against  denial-of-service  attacks,  improve  server  scalability,  and  vastly  enhance  server  reliability.  Serverlron  makes  it  easy  to  manage  all 
your  networked  applications  and  improve  user  response  time  while  eliminating  application  downtime.  It’s  the  industry  leader  in  performance, 
intelligence,  security,  and  price.  So  it’s  no  coincidence  that  Serverlron  is  the  product  of  choice  for  the  world’s  largest  and  most  demanding 

customers.  VISIT  US  TODAY  AT  WWW.FOUNDRYNETWORKS.COM/SI  OR  CALL  US/CANADA 

1  .888.TURBOLAN  (1.888.887.2652)  INTERNATIONAL  + 1  408.586.  1  700. 


FOUNDRY 

NETWORKS 


The  Power  of  Performance ™ 


Foundry  Networks,  Inc.  is  a  leading  provider  of  high-performance  enterprise  and  Service  Provider  switching,  routing  and  Web  traffic  management  solutions  including  Layer  2/3  LAN 
switches.  Layer  3  Backbone  switches,  Layer  4-7  Web  switches,  wireless  LAN  and  access  points,  access  routers  and  Metro  routers. 
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■  REGULATORY  AFFAIRS  ■  CARRIER  INFRASTRUCTURE 


Netifice  adds  new  looks  to  Web  portal 


■  BY  DENISE  PAPPALARDO 

Netifice  Communications  is  upgrading  its 
customer  portal  Web  site  to  let  users  more 
easily  see  the  status  of  their  remote  VPNs 
—  from  order  provisioning  to  network 
uptime. 

This  week  Netifice  is  expected  to  an¬ 
nounce  upgrades  to  its  SmartWorx  Web 
portal,  which  works  hand  in  hand  with  its 
Workforce  Connect  broadband  VPN  ser¬ 
vice.  Upgrades  include  a  Global  Manage¬ 
ment  view, a  software  interface  that  links  up 
a  customers  ERP  application,  and  addi¬ 
tional  e-bonded  access  service  providers. 

The  Global  Management  interface  lets 
network  administrators  see  how  many 
users  are  awaiting  provisioning,  using  DSL 
or  cable  modem  service,  and  are  pre-quali- 
fied  for  broadband  service.  A  user  is  pre¬ 
qualified  after  he  gets  an  e-mail  indicating 
all  the  broadband  services  in  his  area. 

“The  upgrades  allow  users  to  get  to  infor¬ 
mation  more  quickly  and  with  more  infor¬ 
mation  pictured  graphically’  says  Greg  Da¬ 
vis,  vice  president  of  marketing  and  product 
management  at  Netifice.  “By  clicking  on  a 


Takes 

■  AT&T  last  week  announced  custom¬ 
er  wins  with  Bisys  Group,  Sinclair 
Knight  Merz  and  Election  Systems  & 
Software.  Bisys,  which  provides  busi¬ 
ness-processing  services  to  the  finan¬ 
cial  industry,  is  a  longtime  AT&T  cus¬ 
tomer  that  extended  its  contract  by 
three  years.  AT &T  is  providing  inte¬ 
grated  services  such  as  IP  Enabled 
Frame  Relay.  Bisys,  based  in  New 
York,  uses  AT &T’s  network  to  link 
thousands  of  customers  to  its  ser¬ 
vices.  The  carrier  is  deploying  a  net¬ 
work-based  IP  VPN  service  for  SKM, 
a  Sydney,  Australia,  professional  ser¬ 
vices  company.  The  deployment  is 
part  of  a  $2.8  million,  four-year  con¬ 
tract.  The  network  connects  employ¬ 
ees  in  18  locations  across  Australia, 
New  Zealand,  Asia  and  the  U.K.  Also 
announced  was  a  $1.4  million,  two- 
year  contract  with  ES&S,  an  election 
management  software  company  in 
Omaha,  Neb. 


segment  in  a  graph,  users  can  drill  down  to 
data  for  more  specific  information.” 

Netifice  always  had  provided  this  infor¬ 
mation  to  users,  but  they  had  to  dig  around 
to  find  it,  says  Michael  Suby,  an  analyst  at 
Stratecast  Partners.The  upgrade  eases  man¬ 
agement,  which  is  essential  for  customers 
trying  to  understand  a  network  provisioned 
by  several  service  providers,  he  says. 

“The  Global  Management  tool  is  quite 
useful,” says  Glen  Bowling, senior  IT  analyst 
for  Solvay  Pharmaceuticals  in  Marietta,  Ga. 
The  graphs  that  showed  how  many  users 
were  waiting  for  deployment,  were  pre¬ 
qualified,  or  were  waiting  for  a  truck  roll 
were  helpful  when  Solvay’s  1,000-user  VPN 
was  being  deployed  last  year,  he  says. 

It  also  makes  it  easier  to  respond  to  users’ 
questions  about  the  status  of  their  order, 
Bowling  says.  “I  go  to  one  place  and  can 
even  drill  down  and  get  case  notes  for 
each  order;”  he  says. 

Netifice’s  experience  in  managing  large 


VPN  deployments,  such  as  Pfizer’s  10,000- 
user  VPN  in  2003,  was  one  of  the  reasons 
Bowling  went  with  Netifice  over  incum¬ 
bent  AT&T.  AT&T  would  have  been  good 
about  building  a  VPN  using  its  network,  but 
the  company  doesn’t  have  the  same  expe¬ 
rience  Netifice  has  in  dealing  with  a  variety 
of  providers,  he  says. 

But  Suby  says  one  thing  users  have  to 
remember  is  that  Netifice  is  a  smaller  com¬ 
pany  that’s  privately  held.That  means  users 
have  to  go  the  extra  mile  during  contract 
negotiations  asking  for  financial  informa¬ 
tion  that  is  not  public. 

Netifice  also  has  added  an  API  to  its 
SmartWorx  portal  so  users  can  link  their 
corporate  ERP  applications  to  it,  Davis  says. 
Previously  API  users  had  to  download 
spreadsheets  to  the  portal  with  information 
such  as  all  new  employees  hired  that  need 
service  and  requests  to  disconnect  service 
for  users  that  have  left.  The  API  lets  Neti¬ 
fice’s  portal  download  that  information 


from  a  user’s  PeopleSoft  or  SAP  database. 

E-bonding  lets  Netifice  streamline  the 
order  management  and  provisioning  pro¬ 
cess.  E-Bonding  is  essentially  a  software  in¬ 
terface  between  Netifice  and  each  of  its 
access  service  providers,  which  automates 
the  way  service  orders  are  requested, 
tracked  and  provisioned. 

The  e-bonding  DSL  service  providers  are 
BellSouth,  Covad  Communications,  DSL 
.net,  MCI,  New  Edge  Networks,  SBC  and 
Verizon.  The  e-bonding  cable  service 
providers  are  Cablevision,  Charter, 
Comcast,  Cox  Communications  and  Time 
Warner.  ■ 
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Resolutions  for  telecom  managers 


EYE  ON  THE 
CARRIERS 

Johna  Till 
Johnson 


Before  we  get  too  deep  into  2005,  a 
fresh  assessment  of  your  telecom 
strategy  is  in  order.  To  ensure  you’re 
focused  on  the  right  challenges,  taking 
advantage  of  the  most  compelling  cost-sav¬ 
ings  opportunities  and  investing  appropri¬ 
ately  to  enable  a  more  agile  infrastructure, 
make  sure  these  are  on  your  resolution  list: 

1.  Assess  your  remote-office  and  remote- 
worker  connectivity.  Up  to  90%  of  your 
employees  might  be  in  remote  offices,  ac¬ 
cording  to  recent  Nemertes  research.  And 
the  percentage  of  home-office  and  small-/ 
remote-office  workers  has  probably  grown 
faster  than  you  think  —  our  data  shows  a 
nine-fold  increase  in  “virtual  workers”  since 
1999.  (Virtual  workers  are  those  in  a  differ¬ 
ent  location  from  their  supervisors.) 

Your  voice  and  data  costs  might  be  as 
much  as  40%  higher  than  you  think,  once 
you’ve  factored  in  remote-worker  connec¬ 
tivity  such  as  cellular  services,  wireless  mo¬ 


bile  data  charges  and  home-office  Internet 
connections.  To  reduce  costs,  plan  aggres¬ 
sive  carrier  negotiations  (see  resolution 
No.  2  below),  look  into  consolidating  your 
cellular  services  rather  than  reimbursing 
employees  individually,  and  explore  man- 
aged-service,  Wi-Fi  and  cable  offerings. 

2.  Issue  a  telecom  RFP.  Unless  you  rene¬ 
gotiated  in  2004,  take  a  look  at  your  tele¬ 
com  contracts.  I  recommend  following  the 
“matrix  RFP”  format:  List  all  your  services 
down  the  side,  with  geographic  regions  as 
columns  across  the  top.  Include  services 
such  as  cellular,  home-office  Internet, 
mobile  data  and  other  hidden  costs.  Then 
issue  the  RFP  to  as  many  carriers  as  possi¬ 
ble,  including  not  only  local  exchange  car¬ 
riers  and  interexchange  carriers,  but  also 
newer  managed  services  providers,  cable 
companies  and  wireless “cellcos.”  Pursue  a 
competitive  negotiations  strategy  that  aims 
to  reduce  the  number  of  providers  to  no 
fewer  than  two  to  three  (having  one 
provider  holds  you  hostage). 

3.  Assess  your  vulnerability  to  distributed 
denial-of-service  (DoS)  attacks.  Last  year 
saw  a  noticeable  uptick  in  the  number  of 
distributed  DoS  attacks  against  commer¬ 
cial  organizations.  You  might  think  that 
unless  you  operate  an  e-commerce  site, 
you’re  immune  to  the  danger  —  but  an 
increasing  percentage  of  your  corporate 


data  traffic  might  be  traveling  across  the 
Internet.  If  a  distributed  DoS  attack  can  cut 
off  your  remote  workers  from  corporate 
resources, you’re  vulnerable.  Major  carriers, 
including  AT&T,  MCI  and  Sprint, all  offer  dis¬ 
tributed  DoS-protection  services,  as  do 
third-party  players  such  as  Equinix. 

4.  Assess  VoIP.  Documented  VoIP  cost 
savings  include  local-loop  reduction, a  dra¬ 
matic  decrease  in  audioconferencing 
charges,  and  a  50%  to  95%  reduction  in  the 
cost  of  moves,  adds  and  changes,  which 
can  cost  large  organizations  hundreds  of 
thousands  to  millions  of  dollars. 

5.  Optimize  your  WAN.  Telecom  man¬ 
agers  tell  us  they’re  anticipating  a  50% 
increase  in  bandwidth  requirements.  To 
pack  more  traffic  onto  your  pipes,  you’ll 
need  to  investigate  creative  measures.  Pro¬ 
ducts  such  as  those  from  Peribit,  Packeteer, 
Expand  and  Avaya  (which  recently  pur¬ 
chased  RouteScience)  can  help.  They'il 
also  give  you  much-needed  insight  into 
application  performance  —  indispensable 
for  your  migration  to  next-generation  appli¬ 
cations  such  as  Web  services,  business 
peer-to-peer  and  VoIP 

Johnson  is  president  and  chief  research 
officer  at  Nemertes  Research,  an  indepen¬ 
dent  technology  research  firm.  She  can  be 
reached  at  johna@nemertes.com. 
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Speed  and  Range  expansion 


Faster  and  Farther 
Than  Ever  Before! 

Wireless-G  with  SRX 


WRT54GX 

Wireless -G 
Broadband  Router 
with  SRX 


Speed  and  Range  expansion 


Watch  streaming  video  or  play  multi-player  games 
faster  than  ever  before.  And  do  it  comfortably  from 
places  that  were  previously  unreachable.  Introducing 
the  Wireless-G  with  SRX  series,  the  newest,  fastest, 
most  powerful  addition  to  the  Linksys  Wireless-G 
family. 

Enjoy  the  Wireless-G  with  SRX  experience: 

•  Up  to  8  times  faster  than  standard  Wireless-G 

•  Increased  wireless  range  up  to  3  times  farther 

•  Reduced  dead  spots  in  coverage  area 

•  Compatible  with  Wireless-G  and  B  networks 


WPC54GX 

Wireless-G 
Notebook  Adapter 
with  SRX 


Visit  www.Linka 
product  details. 


1-800-7 


Office  depot 


UNKBYS* 

Partner 

Connection 


that  was  easy.” 


Linksys  is  a  registered  trademark  or  trademark  of  Cisco  Systems,  Inc.  and/or  its  affiliates  in 
the  U.S.  and  certain  other  countries.  Copyright  ©  2005  Cisco  Systems,  Inc.  All  rights  reserved. 
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FOR  TYING  TELEWORKERS  TO  THE  ENTERPRISE 


Zetera  debuts  low-cost  storage  option 


■  BY  DENI  CONNOR 

Zetera  recently  announced  technology 
that  lets  small  and  midsize  businesses 
connect  disk  drives  to  networks  more  eas¬ 
ily  and  inexpensively  than  with  direct-  or 
network-attached  storage. 

The  product,  which  will  compete  with 
low-end  NAS  boxes  from  Linksys,  Buffalo 
Technology,  Mirra  and  others,  is  designed 
with  ease  of  installation  in  mind.  Users 
simply  connect  Zetera’s  drive  technology 
to  their  Ethernet  switch  to  share  storage. 

The  Zetera  technology  evolves  how  disk 


netgeai 


Netgear's  upcom 
ing  Storage 
Central  device 
will  use  Zetera 
technology.  _ 


drives  attach  to  networks.Traditionally,  dri¬ 
ves  are  front-ended  by  a  storage  controller 
that  connects  to  the  network  in  one  of 
three  ways.  In  DAS,  the  drives  connect  to 
the  server  with  a  SCSI  or  Integrated 
Device  Electronics  (IDE)  controller.  In 
NAS,  an  embedded  storage  controller  con¬ 
nects  the  drives  to  the  Ethernet  network. 
In  a  storage-area  network,  a  storage  con¬ 
troller  attaches  the  Fibre  Channel  drives 
to  a  SAN  switch. 

Zetera’s  technology  dispatches  with 
these  controller-based  connections.  A 
small  box  connects  to  each  disk  drive 


and  then  to  the  network  switch.  Using 
proprietary  protocols  that  run  over  the 
Universal  Datagram  Protocol  (UDP)  in 
IP  Zetera  can  access  data  faster  than 
either  iSCSI  or  Fibre  Channel.  In  UDP 
data  is  transmitted  directly  between 
devices  with  less  error  checking  than 
other  data  transmission  methods,  which 
results  in  faster  performance  than  either 
NAS  or  iSCSI. 

Moreover,  iSCSI  and  NAS  run  over  TCP 
which  ensures  that  all  packets  are 
acknowledged  and  received  in  the  proper 
order,  a  method  the  company  says  slows 
performance.  Because  Zetera  doesn’t 
require  storage  controllers  of  server-based 
host  bus  adapters,  it  is  less  expensive  than 
either  iSCSI  or  NAS. 

The  technology  currently  employs 
Parallel  Advance  Technology  Attachment 
(ATA)  drives  and  100Base-T  Ethernet  con¬ 
nections  to  the  network.  In  the  future, 
Zetera  will  support  Serial  ATA  drives  and 
USB,  FireWire  and  other  network  inter¬ 
faces.  Zetera’s  controller-less  technology 
will  be  sold  in  the  next  year  through  its 
initial  partners,  Netgear  and  StorCase 
Technology 

In  the  second  quarter,  Netgear’s  Storage 
Central  product  will  offer  a  Zetera-based 
storage  subsystem  that  has  two  IDE  drives. 
The  drive  subsystem  will  let  users  attach 
up  to  400G  bytes  of  storage  to  their  small 
office/home  office  (SOHO)  networks,  and 
share  disk  drives  and  access  them  from 
any  networked  device.  Further,  Storage 
Central  will  allow  mirroring  for  the  safe 
backup  of  information.  While  the  product 
will  not  be  priced  until  it  ships,  Netgear 
says  Storage  Central  will  cost  the  same  as 
comparable  external  hard  drives. 

“Netgear  isn’t  getting  into  the  storage 
business,”  says  Vivek  Patela,the  company’s 


Zetera’s  storage  architecture 

The  technology  lets  hard  disk  drives  attach  directly  to  the  network 
switch,  where  desktop  users  can  share  them. 


Hard  disk  drives 


Desktop  PCs 


senior  director  of  product  marketing. 
Netgear  plans  to  sell  the  Storage  Central 
system  separately  from  the  hard  drives 
and  is  working  with  retailers  to  place  hard 
drives  from  Maxtor,  Seagate  Technology 
and  others  alongside  the  product  on  store 
shelves. 

Netgear  demonstrated  Storage  Central  at 
the  recent  Consumer  Electronic  Show.The 
front  panel  of  the  small,  toaster-shaped 
box  removes  easily  to  expose  two  hard- 
drive  bays.  Although  non-technical  users 
might  be  squeamish  about  installing  hard 
drives,  the  process  was  extremely  easy 
akin  to  attaching  a  9-volt  battery  to  a 
smoke  detector.  This  architecture  lets 
users  upgrade  hard  drives  as  storage 
capacities  increase. 

StorCase  will  launch  a  set  of  IP  storage 
systems  for  small  and  midsize  businesses 
that  incorporate  redundant  power  sup¬ 
plies  and  Gigabit  Ethernet  connections. 
The  devices  will  stripe  data  for  faster  per¬ 
formance,  mirror  data  against  potential 
drive  failure  and  span  it  to  create  logical 


drives.  They  also  can  be  configured  as 
RAID  0,1,4  and  5  for  maximum  protec- 
tion.The  StorCase  drives, which  will  have  a 
maximum  capacity  of  6T  bytes,  are 
expected  to  ship  in  the  second  quarter  of 
this  year. 

Unlike  competing  USB/1394  drives  and 
NAS  boxes,  Zetera  devices  from  Netgear 
and  StorCase  can  span  data  and  perform 
block-level  backups  of  data.  Zetera  says  its 
technology  will  let  users  buy  storage  for 
less  than  $3,000  per  terabyte. 

Founded  in  September  2002,  the  com¬ 
pany  is  led  by  storage  industry  veterans  — 
Bill  Frank,  its  CTO  and  executive  vice  pres¬ 
ident  of  engineering,^  the  inventor  of  IDE 
drive  technology.  A  play  on  “et  cetera,” 
Zetera  means  more  products  are  to  come, 
the  founders  say  They  and  angel  investors, 
privately  fund  the  company 

While  Zetera  initially  is  focused  on  the 
SOHO  and  small-business  markets,  Zetera 
executives  say  it  eventually  will  launch 
products  into  the  enterprise-class  storage 
market.  ■ 


Takes 


■  B-Link  Systems  joined  Belkin, 
Linksys  and  Netgear  by  announcing 
new  802.1 1g  wireless  products  en¬ 
hanced  with  multiple-input  multiple- 
output  technology.  Similar  to  Net- 
gear’s  upcoming  RangeMax  line, 
D-Link’s  Super  G  with  MIMO 
routers  and  adapters  uses  smart 


antenna  technology  to  boost  wireless 
signal  range  up  to  eight  times,  while 
maintaining  backwards  compatibility 
with  802.1 1g  and  802.11b  gear.  The  an¬ 
tennas  use  "beamforming"  technolo¬ 
gy,  which  directs  (or  beams)  the  wire¬ 
less  signal  toward  the  intended  client. 
The  clients  use  what  D-Link  calls  “re¬ 
ceive  combining"  technology  to  maxi¬ 
mize  throughput.  D-Link  says  even 
non-MIMO  clients  will  see  improved 
performance.  Available  next  month, 
the  Super  G  MIMO  router  with  four- 


port  switch  (DI-624M)  will  cost  $150; 
the  cardbus  adapter  (DWL-G650M) 
will  cost  $100. 

■  A  joint  announcement  by  Broad¬ 
com,  Linksys  and  HP  means  we  can 
expect  to  see  Wi-Fi  embedded  in  an 
increasing  number  of  peripherals  like 
printers.  The  three  companies 
launched  SecureEasySetup,  a  tech¬ 
nology  that  configures  Wi-Fi  networks 
and  enables  Wi-Fi  Protected  Access 
security  with  the  push  of  a  button. 


(An  earlier  version  of  Broadcom’s 
technology  requiring  users  to  answer 
two  questions  was  scrapped  because 
it  couldn't  be  applied  to  these  “head¬ 
less"  devices.)  HP  plans  to  put  the 
raised  green  button  on  its  PCs,  note¬ 
books  and  printers;  Linksys  on  its 
routers,  upcoming  phones  and  other 
network  devices.  The  initiative  ensures 
security  on  any  network  device  could 
be  configured  easily  and  could  spur 
“home  network  in  a  box"  product  bur 
dies  from  HP  and  Linksys. 
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Constant,  uninterrupted  access  to  critical  data,  systems  and  people.  Even  when  something  goes  wrong.  That’s  Information  Availability.  And  one  of 


and  data  While  SunGard  Availability  Services  helps  to  ensure  that  the  infrastructure  and  technical  support  you  need  is  always  on.  SunGard  can 
offer  a  secure  and  scalable  environment  at  a  lower  operational  cost  for  produ  tion.  Plus  we  have  over  60  st  te-of-the-art  hardened  facilities  with 
network,  povver  (and  equipment  redundancies  that  are  unparalleled.  For  a  free  copy  of  the  I  DC 
White  Paper:  “Ensuring  Information  Availability”  visit  www.a ailability.sungard.com/idcwp. 
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Adaptive  TCP  optimizes  WANs 


BY  DAN  KOLKOWITZ 


HOW  IT  WORKS 


Adaptive  TCP  acceleration 


Implemented  through  WAN  optimization  appliances, 
adaptive  TCP  acceleration  uses  a  set  of  algorithms 
to  shape  TCP  behavior  to  match  application 
requirements. 

O 

Enterprise  policies 
and  management 


a 


©  Processing  of  TCP/IP  and 
Ethernet  statistics 

Adjustment  of  dynamic  parameters 


TCP  endpoint 


WAN  optimization 
appliance 


WAN 

© 

Bandwidth,  latency  and 
error  measurement 


WAN  optimization 
appliance 


TCP  endpoint 


©The  company  monitors 
and  manages 
application  perform¬ 
ance  across  the  WAN 
through  the  manage¬ 
ment  software. 


©  Adaptive  TCP  uses 
network  statistics 
and  application 
requirements  to  tune 
the  TCP  sessions 
between  nodes. 


©  Appliances  continually 
measure  and  evaluate 
the  actual  performance 
of  the  network  links, 
including  speed,  latency 
and  retransmissions. 


©  Adaptive  TCP 
achieves  the  highest 
possible  throughput 
while  minimizing 
retransmissions  in 
case  of  packet  loss. 


Most  IT  managers  associate  performance 
on  WANs  with  link  bandwidth  and  assume 
larger  pipes  mean  they  can  push  more 
data  through  at  faster  speeds.  However, TCP 
can  play  a  major  role  in  performance  de¬ 
gradation  because  of  the  relationship  of 
latency  and  TCP  window  size  to  TCP  per¬ 
formance  parameters.  Adding  to  that  is  the 
tendency  of  routers  to  dump  packets  when 
faced  with  large  data  surges  independent 
of  the  underlying  protocol.  Adaptive  TCP 
acceleration  is  designed  to  eliminate  these 
TCP  limitations  and  increase  effective 
throughput  significantly 

Adaptive  TCP  uses  a  set  of  algorithms  to 
shape  TCP  behavior  to  match  application 
requirements:  On  a  session-by-session 
basis,  each  TCP  session  is  monitored  and 
managed  to  produce  performance  that 
meets  the  network  requirements  for  the 
named  applications.  Adaptive  TCP  pro¬ 
duces  vast  improvements  in  application  re¬ 
sponse  time  and  application  throughput. 

Performance  problems 

Transmit  window  size,  the  amount  of  data 
sent  at  one  time  before  it  is  acknowledged, 
directly  affects  TCP  performance.  Perform¬ 
ance  is  inversely  proportional  to  round-trip 
time  because  the  protocol  needs  to  guar¬ 
antee  delivery  (via  ACK  packets  —  the  sig¬ 
nal  that  data  has  been  received  successful¬ 
ly)  in  the  reverse  direction. 

The  higher  the  delay  the  higher  the 
round-trip  time  and  the  lower  the  TCP 
throughput,  referred  to  as  the  “bandwidth 
delay  product  problem.” 

In  the  worst  case,  one  endpoint  waits  for 
the  other  to  acknowledge  the  data  transfer, 


leading  to  long  periods  of  network  inactiv¬ 
ity  This  happens  when  the  transmit  window 
is  too  small  and  doesn’t  accurately  reflect 
the  line  speed  and  latency 
To  complicate  matters, TCP  adjusts  its  win¬ 
dow  size  based  on  response  speed:  The 
longer  the  link,  the  smaller  the  window  size. 
TCP  might  never  choose  maximum  win¬ 
dow  sizes  if  response  time  is  slow,  meaning 
many  WAN  links  are  never  used  to  full 
capacity  Thus, TCP  can  cause  performance 
degradation  in  WANs,  even  when  there  is 


more  than  enough  bandwidth.  Similarly  re¬ 
transmissions  heavily  influence  TCP  perfor¬ 
mance  —  a  disturbing  detail  to  contem¬ 
plate  is  that  1%  packet  loss  can  cause  as 
much  as  80%  degradation  in  performance. 

Adaptive  TCP  acceleration  resolves  these 
problems  by  using  a  self-tuning  technique 
that  automatically  changes  behavior  of  the 
end  hosts  in  a  manner  that  is  transparent  to 
participating  applications,  the  network  and 
to  end-user  computers.  The  window  size  is 
set  according  to  the  measured  bandwidth 


available  on  the  connecting  link. 

Used  in  next-generation  WAN  optimiza¬ 
tion  appliances,  adaptive  TCP  acceleration 
is  implemented  by  installing  an  appliance 
at  each  end  of  the  WAN  link. 

To  avoid  degrading  the  performance  of 
other  applications  that  share  the  same  link, 
the  technology  automatically  adjusts  the 
transmission  parameters  according  to  poli¬ 
cies  IT  managers  define  and  to  account  for 
packet  loss.The  policies  are  defined  by  uti¬ 
lizing  the  management  software  of  the  WAN 
optimization  appliance.  The  appliance 
then  interprets  and  implements  the  poli¬ 
cies.  At  the  same  time,  adaptive  TCP  accel¬ 
eration  selects  the  TCP  window  size  that 
achieves  the  highest  possible  throughput 
and  minimizes  retransmission  in  case  of 
packet  loss  on  the  WAN  link. 

Finally  adaptive  TCP  acceleration  first 
makes  use  of  well-known  techniques  for 
improving  TCP  performance,  such  as  dy¬ 
namically  setting  large  windows  (as  appro¬ 
priate),  selective  ACK  and  TCP  Fast  Start. 

Selective  ACK  acknowledges  data  and  al¬ 
lows  immediate  retransmission  of  missing 
data,  thus  avoiding  the  delays  associated 
with  the  TCP  retransmission  algorithms 
which  rely  on  lengthy  timeouts.  TCP  Fast 
Start  is  an  algorithm  that  hastens  the  growth 
of  the  TCP  send  window,  thus  quickly  utiliz¬ 
ing  the  available  bandwidth. 

As  a  result,  end-to-end  WAN  connectivity 
is  no  longer  limited  to  a  one  connection 
constrained  by  TCP  window  size  and  other 
parameters.  All  data,  compressed  or  un¬ 
compressed,  moves  over  the  WAN  faster. 

Kolkowitz  is  co-founder  and  vice  president 
of  engineering  for  Swan  Labs.  He  can  be 
reached  at  dkolkowitz@swanlabs.com. 


Dr,  Internet 


By  Steve  Blass 


We  have  a  large  Web  survey  with  100 
radio  button  groups.  How  can  we  val¬ 
idate  (using  JavaScript)  before  the 
survey  is  submitted? 

To  ensure  every  radio  button  group 
in  a  form  has  an  item  selected,  step 
through  the  form  fields,  track  whether 
a  radio  group  is  found,  and  then  verify 
that  every  found  radio  group  has  a 
selection.  This  code  snippet  is  one 
way  to  implement  this  for  a  form 


named  “rform." 

function  validate_radio  ()  { 
var  errors,  i,  itemname,  fieldok- 
flag=false,  errf lag=false,  ,ffi; 

for  (i=0;i<document.rform. length; 
i++)  { 

itemname=document.rform.ele- 

ments[i].name; 

if  (document.rform.elements[i].type 
==  'radio')  { 
f  ieldokf  lag=false; 


II  assume  radio  group  fields  are  in 

order 

while  (document.rform. elements 
[ij.name  ==  itemname)  { 
if  (  document. rform. elements 
[ij.checked  )  { 
f  ieldokf  lag=true; 

} 

i=i+1; 

} 

i=i-1;  II  while  loop  overcounted  by  1, 
adjust 


if  (f  ieldokf  lag==false)  { 
errflag=true; 

ffi=i-1;  II  ffi  is  index  to  last  radio  but¬ 
ton  in  group 
} 

} 

document.  rform.elements[ffi].focus 

0; 

alert('Please  complete  the  missing 
item(s)  and  then  click  Submit  again'): 
return  (lerrf lag): 

} 


p 
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Linux  gets  small  and  smaller 


&EARHEAD 
INSIDE  THE 

NETWORK 
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Mark 
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Last  week  unbridled  joy  entered  your 
life  when  you  got  coLinux  running  on 
your  Windows  PC  without  any  kind  of 
virtual  machine  monitor  and  without  the 
aid  of  a  safety  net.  Several  of  you  have 
already  written  in  to  tell  of  your  coLinux 
exploits,  and  this  week  —  can  you  believe 
it?  —  it  gets  better! 

The  Debian  distro  we  got  running  last 
week  under  coLinux  was  cool  and,  with  a 
certain  amount  of  finagling,  you  can  get  X 
Window  services  running  but  it  is  a  bit  of  a 
chore  (see  www.nwfusion.com,  DocFind- 
er:  5433). 

So  howd  you  like  a  fully  workable  and 
useful  Linux  implementation  plus  an  all 
singing  and  dancing  X  Window  system  run¬ 
ning  cooperatively  with  Windows  in  a  simi¬ 
lar  manner  to  coLinux  without  breaking  a 
sweat?  Your  wish  is  our  command! 

The  answer  to  your  wish  is  the  embedded 
version  of  Damn  Small  Linux.  Damn  Small 
Linux  is  actually  a  variant  of  the  Knoppix 
distribution  that  we  mentioned  a  gazillion 


years  ago. 

Knoppix  (www.knoppix.net  —  tag  line, 
“From  zero  to  Linux  in  5  minutes”)  is  a  vari¬ 
ant  of  Debian  GNU/Linux  that  was  stripped 
down  so  that  it  boots  and  runs  completely 
from  CD.  The  standard  version  of  Knoppix 
takes  over  the  whole  machine  but  before 
we  get  into  Damn  Small  Linux  let  us 
explain  a  little  about  its  parent,  Knoppix. 

Despite  fitting  on  one  CD,  Knoppix  is  by 
no  means  small.  It  includes  multiple  desk¬ 
top  environments  and  a  lot  of  Linux  soft¬ 
ware  packages,  such  as  OpenOffice.org, 
Abiword,  The  Gimp,  Konqueror,  Mozilla, 
Apache,  PHP  and  MySQL. 

To  get  the  original  Knoppix  running 
download  the  ISO  image  from  www.knop 
pix.net/get.php  and  burn  it  onto  a  CD, stick 
the  CD  in  a  bootable  drive,  and  you’re  off! 
Knoppix  won’t  interfere  with  whatever 
operating  system  is  installed  already  So 
when  you’re  finished,  remove  the  CD  and 
reboot,  and  you  are  back  to  Windows  or 
whatever  you  installed  on  the  hard  disk. 

To  run  Knoppix,  your  machine  needs  at 
least  an  Intel  486  or  later  with  16M  bytes  of 
RAM  for  text  mode  or  96M  bytes  for  graph¬ 
ics  mode  with  KDE,and  at  least  128M  bytes 
of  RAM  for  the  various  office  products. 
Along  with  that  you’ll  need  a  bootable  CD- 
ROM  drive  or  a  boot  floppy  and  standard 


CD-ROM  (IDE/ATAPI  or  SCSI),  a  standard 
SVGA-compatible  graphics  card,  and  a  ser¬ 
ial  or  PS/2  standard  mouse  or  IMPS/2-com- 
patible  USB-mouse. 

Knoppix  is  an  excellent  piece  of  engi¬ 
neering  and  has  attracted  a  huge,  active 
developer  community  So  it  is  no  surprise 
that  these  developers  continually  have 
added,  improved  and  mutated  Knoppix  in 
wild  and  wonderful  ways.  See  the  Knoppix 
Wiki  (www.knoppix.net/wiki/Main_Page) 
for  some  outstanding  stories  on  how  to  do 
all  sorts  of  amazing  things  with  Knoppix. 

But  if  you  are  going  to  get  really  serious 
with  Knoppix,  you  need  a  wonderful  book 
we  just  got  our  hands  on:  Knoppix  Hacks  by 
Kyle  Rankin.  This  book  is  beyond  excel¬ 
lent.  It  explains  everything  you  need  to 
know  about  Knoppix  and  how  to  use  the 
operating  system  for  repairing  and  working 
with  Windows  systems! 

For  example,  Hack  No.  79  details  how  to 
use  Knoppix  to  download  patches  onto  a 
Windows  system  booted  under  Knoppix  so 
that  you  can  install  the  updates  after 
rebooting  into  Windows.  This  process 
allows  you  to  install  patches  without  con¬ 
necting  Windows  to  the  Internet,  a  funda¬ 
mental  requirement  for  highly  secure 
Windows  installations. 

All  of  the  hacks  from  Nos.  71-79  are  for 
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rescuing  Windows.  There’s  instructions  on 
writing  to  Windows  NT  File  System  parti¬ 
tions,  resetting  lost  NT  passwords  and 
doing  a  whole  load  of  tasks  Windows  res¬ 
cue  disks  either  can’t  or  don’t  let  you  do. 

Now  being  designed  for  booting  from  a 
CD,  Knoppix  doesn’t  automatically  save  its 
state  on  exit,  but  there  are  features  that  let 
you  do  so.  Hack  No.  21  explains  how  to 
save  your  Knoppix  settings  to  floppies, 
USB  drives  or  other  removable  media. 
Knoppix  also  can  load  its  settings  from 
the  operating  system  installed  on  the 
hardware  —  Linux  (Hack  No.  22)  or  Win¬ 
dows  (Hack  No.  23).  This  is  an  outstand¬ 
ingly  useful  book. 

Anyway,  we  started  by  talking  about 
Damn  Small  Linux  and,  as  we  noted.it  is  a 
stripped  down  version  of  Knoppix,  which 
is  already  a  stripped-down  Linux!  Damn 
Small  Linux  can  be  run  in  much  the  same 
way  as  Knoppix  and  take  over  the  whole 
machine,  but  if  you  are  on  a  PC  running  at 
better  than  1  GHz,  you  can  run  embedded 
Damn  Small  Linux  alongside  Windows! 

But  wait  .  .  .  there's  more!  Unfortunately 
you  ’ll  have  to  wait  until  next  week  when  we 
get  Damn  Small  Linux  up  and  running. 
Joyous  expostulations  to  gearhead@ 
gibbs.com. 


Handy  tools  with  just  a  push  of  a  button 


Quick  takes 
on  high-tech  toys 

By  Keith  Shaw 


The  scoop:  Express  Remote,  by  Keyspan,  about  $60. 

What  it  does:  The  Express  Remote  has  two  functions: 
You  can  connect  the  base  station  via  USB  cable  to  your 
PC  or  Macintosh,  and  then  use  the  remote  to 
control  your  music  player  software.  Or 
you  can  connect  the  USB  cable  to  the 
USB  port  on  the  Apple  AirPort  Express 
and  control  the  iTunes  application  on  a 
computer  in  another  room  (assuming 
that’s  what  you  use  your  AirPort  Express 
for). 

Why  it’s  cool:  When  your  computer  is 
upstairs  streaming  wirelessly  down  to 
your  stereo  system,  changing  the  song, 
hitting  mute  or  pausing  the  §oa 
involves  a  lot  of  old-fashioned 
net”  (running  upstairs  and  picl 
songs).With  the  Express  Remote, y 
pick  the  next  song  by  just  pushing  § 
ton.  Connecting  directly  to  a  compute 
to  control  music  applications  already 
on  it  isn’t  as  cool,  but  there  might  be 
situations  when  you’re  playing  a  song 
on  a  PC  and  want  to  control  a  song 
without  walking  over  to  it.  But  when  it  is 
connected  to  a  PC, you  also  can  con¬ 
trol  other  applications,  such  as  a  DVD 
player. 


A  caveat:  Make  sure  that  the  AirPbrt 
Express  device  has  the  latest  firm¬ 
ware  (at  least  Version  6.1),  otherwise 
you’ll  spend  a  few  minutes  trying  to 
figure  out  why  the  remote  control 
isn’t  controlling  the  iTunes  soft¬ 
ware.  After  checking  the  batteries 
and  using  the  remote  with  a  com¬ 
puter,!  finally  checked  the  Airport 
Express  firmware  and  found  that 
it  was  old.  A  quick  firmware 
upgrade  was  all  it  took 
to  get  the  remote 
working  with  the 
AirFbrt  Express.  Also  at 
$60,  the  remote  seems  a  lit¬ 
tle  pricey  but  you  can  find  this 
for  less  through  some  online  sites. 
Grade:  ★★★★ 


The  scoop:  Digital  Hotspotter,  by  Canary 
Wireless,  about  $50. 

What  it  does:  This  is  a  handheld  Wi-Fi  scan¬ 
ner  that  does  more  than  just  flash  a  light 
when  you  are  in  the  range  of  an  802.1  lb  wire¬ 
less  network.  Unlike  some  other  keychain¬ 
sized  devices,  the  Digital  Hotspotter  pro¬ 
vides  additional  data  to  help  you  get  con¬ 
nected  faster.  The  device  scans  all  the 
channels  within  the  802.1  lb  spectrum  — 
if  it  finds  a  network,  it  gives  you  the 
Service  Set  Identifier  name,  the  signal  strength 

Keyspan's  Express  Remote  lets  you  (displayed  in  bars  of  strength),  whether 
control  music  playing  on  your  PC  or  the  network  is  open  or  secure,  and  the 
Mac  from  afar.  channel  number. 


The  Canary  Wireless  Digital 
Hotspotter  gives  you  signal  strength 
and  the  SSID  security  information  for 
wireless  LAN  hot  spots. 

Why  it’s  cool:  Just  knowing 
that  a  wireless  access  point  is 
available  is  not  enough  if  you 
boot  up  your  laptop  and  then 
find  out  that  it’s  a  secure  net¬ 
work.  By  using  the  Hotspotter, 
you  can  find  out  the  name  of 
the  network  and  whether  it’s 
secure  and  how  strong  it  is 
before  you  even  turn  on  your 
notebook.  Not  only  can  this  save 
time  but  you  can  get  connected  to  an 
open  network  quicker.  In  addition,  the 
device  can  scan  for  multiple  networks  within  one  area  — 
don’t  like  the  network  that  came  up?  Hit  the  button  again, 
and  the  device  will  give  you  another  network  within  the 
area  (if  it’s  available).  If  no  network  is  around.it  will  tell 
you  that. 

A  caveat:  In  our  tests  we  got  a  “low  battery”  warning  (it 
runs  on  two  AAA  batteries)  after  pushing  the  button  sever¬ 
al  times  walking  around  a  trade  show  floor  looking  for  a 
network.  While  we  didn’t  actually  drain  the  battery  it  was 
an  odd  message  (the  company  assumes  that  you  won’t  be 
pressing  the  button  all  day  like  I  did).  Additionally  the 
Canary  Web  site  says  the  device  has  been  back-ordered, so 
finding  one  might  be  difficult.  (Targus  has  a  similar  device 
coming  out  soon,  so  you  could  check  there,  too.) 

Grade:  ★★★★•* 

Shaw  is  senior  editor  of  product  testing.  He  can  be 
reached  at  kshaw@nww.com. 


. 


It's  1  pm.  Do  you  know  your  wireless  network  has  an  open-door  policy? 


Keep  unauthorized  users  off  your  network. 

Sure,  your  wireless  network  makes  you  more  productive,  but  the  security  loopholes  are  huge.  And  securing 
a  wireless  network  is  expensive  and  complicated,  right?  Not  with  SonicWALL®.  We  make  wireless  security  simple, 
affordable,  and  easy  to  use.  So  businesses  like  yours  can  concentrate  on  what  they  do  best — business. 

Our  Distributed  Wireless  Solution  provides  real,  enterprise-class  protection  from  unwanted  intruders,  viruses,  and 
more  in  one  affordable,  powerful  package.  Every  SonicWALL TZ  170  and  PRO  Series  appliance — complete  with 
Gateway  Anti-Virus  and  Intrusion  Prevention — supports  our  SonicPoints,  making  it  easy  to  add  secure  wireless 
connectivity  to  your  network.  Whether  you're  starting  from  scratch,  or  adding  to  your  wired  network,  SonicWALL's 
got  the  answer  to  your  needs. 


SonicPoint 


Slam  the  door  on  uninvited  wireless  snoops.  Get  the  full  story  on  SonicWALL's  Distributed  Wireless  Solution 
at  www.sonicwall.com/home/dws.asp  or  call  us  at  1 .800.557.6642. 


Around  the  clock ,  around  the  world,  and  around  the  Web - 

SonicWALL  is  there  for  you . 


Gateway  Anti-Virus  ■  Intrusion  Prevention  ■  Content  Security  Management .  ■ 
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ON  TECHNOLOGY 

John  Dix 

Processing 
datastreams 
in  real  time 


Prognosticators  say  that  in  the  next  10  to  20  years, 
anything  of  value  will  be  given  a  sensor  tag  so  we 
can  track  its  status  and  location,  or  both.  And  the 
network  implications  will  be  huge,  with  real-time  streams 
of  data  flowing  every  which  way 
One  start-up  formed  to  deal  with  the  new  demands  is 
StreamBase  Systems,  which  has  developed  what  it  calls  a 
stream  processing  engine.The  systems  software  (for  Linux, 
Solaris  and  next  month  Windows)  is  designed  to  process 
real-time  streaming  data  feeds  in  milliseconds. 

The  product  is  commercialization  of  research  that  has 
been  three  years  in  the  making  at  MIT,  Brown  and  Brandeis 
universities, says  founder  and  CTO  Michael  Stonebraker. 
Stonebraker  was  the  main  architect  of  the  Ingres  relational 
database  management  system  (DBMS). 

There  are  two  ways  of  dealing  with  messages  in  a  stream, 
he  says:  examine  and  route  them,  which  is  fairly  easy;  or 
correlate  the  messages  —  even  if  they  arrive  at  different 
times  —  and  process  them.That  is  harder,  especially  when 
the  objective  is  to  do  it  in  milliseconds. 

Financial  service  firms  have  applications  that  demand 
that  capability  but  Stonebraker  sees  future  demand  in 
everything  from  the  military  (data  streaming  from  battle¬ 
field  sensors),  to  industrial  control  and  weather  tracking. 

For  now,  the  company  is  focused  on  financial  services, 
helping  companies  do  things  like  rationalize  information 
from  multiple  stock  feeds. You  can’t  do  that  fast  enough 
using  a  relational  DBMS  because  that  requires  writing  the 
datalogging  it,  indexing  it  and  committing  the  transaction, 
Stonebraker  says. That’s  why  financial  firms  tend  to  build 
their  own  systems  at  great  time  and  expense. 

StreamBase  can  process  data  on  the  fly  using  what  it 
calls  StreamSQL.  It  essentially  adds  windows  (defined  by 
time  or  by  number  of  messages)  that  force  SQL  joins  and 
aggregates  without  storing  the  data.  And  it  can  correlate 
information  from  multiple  streams. 

The  result  is  a  system  that  process  stream  data  “a  couple 
of  orders  of  magnitude  faster  than  the  relational  DBMS 
approach,”  Stonebraker  says.  And  the  tool’s  graphical  devel¬ 
opment  environment  means  customers  can  build  applica¬ 
tions  in  days  instead  of  years,  he  says. 

To  win  converts,  the  company  tells  would-be  customers  it 
will  fix  their  hardest  message  stream  problem  in  a  week, 
even  before  talking  sales. 

StreamBase  —  which  will  officially  launch  at  the  Demo 
conference  Feb.  13  —  looks  to  have  an  interesting  product. 
But  we  can  expect  a  slew  of  companies  to  emerge  over 
the  coming  years  to  deal  with  the  explosion  in  sensor  net- 
works.This  could  be  the  next  big  thing. 


Customer  disservice 

I  had  to  laugh  out  loud  today  when  I  read  Mark 
Gibbs’  BackSpin  column  “Online  commerce  and 
Mrs.  Gibbs”  (www.nwfusion.com,  DocFinder: 
5425).  I  have  been  trying  to  assist  my  wife  with  a 
duplicate  payment  that  appeared  on  her  credit 
card  statement  from  Travelocity.  She  booked  a 
hotel  room,  clicked  “submit”  and  received  a  trans¬ 
action  timeout  message.  Frustrated,  she  had  to 
book  the  room  all  over  again.  Imagine  her  surprise 
to  get  the  bill  and  see  both  transactions  on  the 
statement. 

A  call  to  Travelocity  support  yielded  the  “you 
must  have  hit  the  back  button”  response.  The  cus¬ 
tomer  service  representative  said  he  couldn’t  help 
and  that  she  needed  to  send  an  e-mail  to  report 
the  problem  —  to  an  address  from  which  the  mes¬ 
sage  got  bounced  back. 

Well,  thank  goodness  for  Capital  One  credit  card 
services.  She  filed  a  dispute  with  them,  and  they 
agreed  to  work  with  the  vendor  to  get  the  charges 
corrected. 

I  wonder  how  much  extra  revenue  these  compa¬ 
nies  earn  off  of  consumers  who  don’t  pay  close 
attention  to  their  monthly  statements? 

Tim  Sander 
Director  of  IT 
Applied  Systems 
University  Park,  Ill. 

Mark  Gibbs’  experience  with  PayPal  is  quite  similar 
to  mine.  I  let  my  son  purchase  a  gaming  token 
through  PayPal,  only  to  find  out  that  over  the  course 
of  a  weekend  eight  transactions,  totaling  more  than 
$250,  were  withdrawn  from  my  account.  When  I 
caught  up  with  PayPal  the  following  Monday  morn¬ 
ing,  their  response  was  that  I  must  have  given  out  my 

E-mail  letters  to  jdix@nww.com  or  send  them  to  John  Dix,  editor  in 
chief.  Network  World,  1 1 8  Turnpike  Road,  Southborough,  MA  01772. 
Please  include  phone  number  and  address  for  verification. 


password  and  I  was  responsible. They  finally  agreed 
to  investigate,  but  did  not  indicate  that  it  was  going 
to  succeed. So  in  the  short  term  I  turned  to  my  bank, 
which  reversed  the  transactions. 

Several  weeks  later,  I  got  an  e-mail  from  PayPal 
telling  me  that  their  investigation  was  not  successful, 
and  since  my  bank  had  refused  the  funds,  the  out¬ 
come  was  now  in  my  favor.  Now,  every  two  to  three 
weeks  I  receive  notices  from  PayPal  asking  why  I 
won’t  log  on  and  update  my  account  and  transact 
with  them.  This  is  not  a  company  that  I’ll  be  doing 
business  with  again.  Perhaps  they  need  a  lesson  in 
e-commerce,  or  better  yet,  customer  service. 

Joan  Villanueva 
Plano, Texas 

In  response  to  Mark  Gibbs’  column  about  cus¬ 
tomer  disservice,  the  problem  is  not  just  limited  to 
eBay  and  PayPal  buyers.  I  work  for  a  salvage  com¬ 
pany  and  we  get  a  lot  of  different  stuff,  the  major¬ 
ity  in  very  good  condition.  Some  of  our  higher- 
ticket  items  we  sell  on  eBay.  Both  of  our  eBay 
seller  accounts  are  power-seller  level,  with  more 
than  99%  positive  feedback. 

We  sell  items  that  some  manufacturers  want  to 
control,  such  as  certain  brand  names,  collectibles 
and  so  on.  Occasionally  these  manufacturers  will 
complain  to  eBay  that  we  are  selling  something  they 
don’t  want  us  to  sell.  EBay  takes  their  word  for  it  and 
shuts  down  the  auctions  of  all  items  under  our  ID  — 
even  though  we  are  power  sellers  with  an  excellent 
history;  no  call,  no  e-mail,  no  communication  is 
made  whatsoever.  The  last  time  this  happened,  we 
found  a  good  eBay  contact  to  help  us  resolve  future 
issues.  But  with  the  current  rash  of  eBay  boycotts, we 
fear  that  the  company’s  solution  will  be  to  continue 
the  approach  of  “kill  first,  don’t  ask  questions  later’’ 

Bruce  Walton 
Director  of  IT 
National  Product  Sales 
Salt  Lake  City 


More  online!  www.nwfiision.com  Find  out  what  readers  are  saying  about  these  and  other  topics.  DocFinder:  5424 


—  John  Dix 
Editor  in  chief 
jdix@nww.com 
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LIPPIS  ON  COMMUNICATIONS 

Nick  Lippis 


LAN  changes  have  ebbed  and  flowed  on  a 
nearly  consistent  five-year  basis.  In  1990, 
10M  bit/sec  shared  Ethernet  emerged  as 
the  LAN  standard  —  only  to  be  usurped  five 
years  later  by  the  introduction  of  Fast  Ethernet 
and  Ethernet  switching.  Between  1995  and 
2000,  two  important  innovations  occurred:  vir¬ 
tual  LANs  and  Gigabit  Ethernet.  Now  in  2005,  the  LAN  market  is  about 
to  make  another  fundamental  transition:  from  virtual  LANs  to  trusted 
LANs,  which  let  secure  internal  networks  be  provisioned  at  high  speeds 
whether  transport  is  wireless  or  wired. 

Nearly  all  network  vendors  are  involved  in  developing  the  trusted 
LAN  market.  Cisco,  along  with  partners  such  as  IBM,  Network 
Associates,  Symantec, Trend  Micro,  Microsoft  and  Computer  Associates, 
is  taking  the  lead  in  spearheading  trusted  LANs  with  its  Network 
Admission  Control  technology  The  major  switched  Ethernet  vendors, 
such  as  Enterasys,  Extreme  Networks,  Foundry  Networks,  3Com  and  HE 
are  all  working  on  and  investing  in  trusted  LAN  products.  Enterasys  has 
focused  its  entire  company  and  much  of  its  R&D  efforts  on  secure  net¬ 
working,  making  it  a  leader  in  trusted  LANs.Wireless  LAN  players  such 
as  Colubris,  Aruba  Wireless  Networks,AirMagnet,Legra,Bluesocket  and 
Chantry,  will  become  trusted  LAN  providers  as  WLANs  increasingly 
become  folded  into  a  trusted  IAN  framework.  And  IP  telephony  and 
trusted  networks  have  become  inextricably  linked  as  CIOs  strive  to 
resolve  infrastructure  vulnerabilities  before  voice  and  data  ride  on  the 
same  IP  network. 

With  trusted  LANs,  IT  departments  can  segment  their  networks  into 


Trusted  LANs  set  to  take  off 


secure  domains.  For  example,  some  employees  might  be  working  on  a 
federal  contract  that  restricts  data  access  on  a  need-to-know  basis.  A 
secure  domain  can  be  wrapped  around  these  employees  and  systems, 
creating  a  firewall  between  them  and  all  other  corporate  IT  resources. 
Financial  performance  information  can  be  placed  into  a  secure 
domain  that  includes  only  the  executives  and  financial  and  account¬ 
ing  staff. Secure  domains  will  crisscross  trusted  LANs;  some  could  over¬ 
lap  while  others  would  be  mutually  exclusive. 

The  move  to  embed  security  features  deeply  into  a  range  of  network 
equipment  will  transcend  LANs  to  encompass  networks  in  general.  IT 
resources  will  be  organized  domains  with  different  levels  of  security 
while  trusted  networks  will  be  an  organization  of  secure  domains.The 
impact  of  this  new  activity  will  be  huge.  Security  appliance  companies 
will  be  forced  to  change  their  business  models  and  work  with  network 
equipment  suppliers.  This  is  already  happening.  Consolidation  and 
market  exit  will  hit  the  security  appliance  market  hard  late  this  year  and 
well  into  next  year. Trusted  networks  will  usher  in  fundamental  change 
in  network  design  and  industry  structure.lt  has  to  be  this  way  because 
the  cost  of  securing  networks  today  is  way  too  high. 

(Note:  In  my  last  column  I  wrote  that  British  Petroleum  plans  to 
change  out  its  150,000  fixed  phones  to  nearly  all  softphones  and  smart 
phones  by  2008.  In  fact,  BP  is  exploring  multiple  endpoint  options  and 
has  a  flexible  schedule.) 


Now,  in  2005, 
the  LAN  market 
is  about  to  make 
another  funda¬ 
mental  transition. 


Lippis  is  an  authority  on  corporate  IP  communications  and  consultant 
to  CXOs  of  Global  2000  companies.  He  can  be  reached  at 
nick@lippis.com. 


CACHE  ADVANCE 

Linda  Musthaler 

Toward  the  end  of  2004, IBM  announced 
its  intention  to  sell  its  renowned  PC  divi¬ 
sion  to  the  Chinese  company  Lenovo 
Group.  Lenovo  has  agreed  to  pay  IBM  $  1 .25 
billion  for  the  business,  $650  million  of  that  in 
cash.  Lenovo  will  get  to  use  the  respected  IBM 
brand  on  its  PCs  for  five  years.  In  return,  IBM 
will  get  an  18.9%  stake  in  what’s  being  called  “the  joint  venture.” 

Considering  IBM’s  PC  business  generates  about  $10  billion  each  year 
in  revenues,  onlookers  might  think  this  sale  doesn’t  make  much  sense. 
But  it  does,  once  you  look  under  the  covers. 

We  know  that  IBM  didn’t  have  a  huge  worldwide  market  share  for  its 
PC  products  in  recent  years  —  5%  by  most  estimates,  far  behind  mar¬ 
ket  leaders  Dell  and  HPand  shrinking  as  time  went  by  Despite  the  fact 
that  IBM  continued  to  offer  fine  products  with  technical  innovations, 
enterprise  customers  eschewed  the  brand  in  favor  of  lower-priced 
products  from  IBM’s  competitors.  Apparently  customers  didn’t  see  the 
value-add  in  IBM’s  technology.  The  fact  is,  PCs  are  now  a  commodity 
and  a  few  extra  bells  and  whistles  aren’t  worth  the  added  dollars. 

In  addition  to  losing  market  share,  the  PC  business  was  bleeding 
money  for  IBM  to  the  tune  of  nearly  $1  billion  in  less  than  four  years. 
This  might  make  you  wonder  why  Lenovo  struck  the  deal.  Why  would 
it  buy  a  losing  entity? 

In  my  opinion,  the  deal  is  all  about  shifting  demographics.  IBM’s 
largest  markets  for  its  PCs  are  North  America  and  Europe,  which  are  sat¬ 
urated  —  virtually  everyone  in  these  regions  who  wants  a  PC  already 
has  one, or  more.The  action  has  shifted  to  developing  markets  in  Asia, 
especially  China. 

With  its  enormous  population  and  growing  per  capita  income,  China 
has  been  called  the  most  important  market  in  the  world.The  country  is 
a  glowing  beacon  for  companies  that  want  to  sell  high-tech  products  to 
consumers,  corporations  and  government  agencies.  Many  of  these  enti¬ 
ties  have  yet  to  purchase  their  first  PC  and  are  hungry  to  do  so. Yet  as  a 


IBM  PC  sale  makes  sense 


market,  China  is  a  tough  nut  to  crack,  especially  for  outsiders.  Even 
worldwide  market  leader  Dell  has  dropped  out  of  the  Chinese  PC  mar¬ 
ket  because  of  stiff  competition. 

Much  of  that  competition  comes  from  none  other  than  Lenovo,  which 
holds  nearly  a  25%  share  of  the  market.  Lenovo  is  far  and  away  the 
market  leader  in  China.  When  you  add  in  the  6%  share  held  by  IBM, 
Lenovo  sells  nearly  one-third  of  all  PCs  in  China.  Now  you  can  see  why 
IBM  would  want  a  slice  of  Lenovo  ownership.  There  should  be  good 
recurring  revenue  for  years  to  come. 

For  its  part,  Lenovo,  previously  known  as  Legend  Group,  has  aspira¬ 
tions  to  grow  outside  China.  It  will  instantly  do  so  with  the  IBM  brand 
and  worldwide  presence  of  marketing  and  sales  offices  and  experts. 

Despite  its  potential, I  have  misgivings  about  the  deal. I  mourn  the  loss 
of  innovation  as  IBM  no  longer  invests  billions  of  dollars  annually  in 
new  PC  technologies.  Although  Lenovo  pledges  to  continue  R&D  on 
new  technologies,  I  foresee  a  curtailment  as  the  company  focuses  on 
lowering  costs  to  stay  competitive  in  its  markets.  However,  doing  so 
might  cause  Lenovo  to  lose  customers  in  precisely  the  markets  it  cov¬ 
ets:  those  outside  of  China. 

There  also  will  be  the  inevitable  culture  clashes  among  the  new  com¬ 
pany’s  employees.  The  deal  shifts  nearly  10,000  IBM  employees  to 
Lenovo’s  payroll,  doubling  the  size  of  the  Chinese  company  overnight. 
The  new  Lenovo  is  sending  its  senior  executives  to  offices  in  New  York 
state  to  be  closer  to  IBM’s  corporate  headquarters.  While  I  can’t  say  I 
know  anything  about  how  Lenovo  is  run,  I’d  venture  to  guess  that  it  isn’t 
“the  IBM  wa>f’ I  predict  a  brain  drain  will  ensue  as  frustrated  IBMers  find 
employment  elsewhere. 

Sadly  it’s  a  sign  of  the  times  that  PCs  have  reached  commodity  status, 
and  IBM’s  sale  of  its  PC  business  is  just  part  of  the  industry  life  cycle.  But 
it’s  better  to  get  out  now  before  losing  another  billion  dollars. 
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Musthaler  is  vice  president  of  Currid  &  Company,  a  Houston  technolo¬ 
gy  assessment  firm.  She  can  be  reached  at  linda@currid.com. 
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Today  you  can  secure  your  infrastructure  without  putting 
your  budget  in  jeopardy.  How?  ProCurve  Networking  by  HP. 
it  can  help  stop  both  wired  and  wireless  intruders  at  the 
edge  and  the  core  of  your  infrastructure.  It  also  instantly 
recognizes  and  tracks  your  authorized  users,  so  they  gain 
access  precisely  to  the  information  they  need — and  that 
means  they  can  be  more  productive.  Finally,  with  ProCurve, 
you  can  get  smarter  security  at  a  significantly  lower  cost. 
Get  more  from  your  network.  And  get  it  for  less. 
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Find  out  more  about  ProCurve  security  solutions.  Download  white  papers  on  Secure 
Mobility  and  our  cost-of-ownership  analysis  at  www.hp.com/tradeups.com/procurvepromo. 
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Vulnerably  alerting 
services 


Vulnerability  alerting  services  free  up 
expensive  IT  security  staff 


BY  MANDY  ANDRESS,  NETWORK  WORLD  LAB  ALLIANCE 


When  a  new  security  vulnerability  turns  up, you  need  to  know  when  it  was 
released,  which  products  it  affects,  what  it  possibly  could  do  to  your  net¬ 
work  and  how  you  can  preemptively  address  it. 

Now  multiply  that  by  889  —  the  number  of  vulnerability  alerts  issues  in  2004 
(wwwnwfusion.com,  DocFinder:  5421)  —  and  you’ve  got  a  serious  pile  of  data  that 
needs  to  be  sorted  and  analyzed  by  knowledgeable  security  staff  that  you  may  or 
may  not,  have  at  your  fingertips. 


In  our  test  of  vulnerability  alerting  ser¬ 
vices  from  Co-Logic  Security  Cybertrust, 
PivX  Solutions,  SecurityMob,  Security- 
Global.net,  Secunia  and  Symantec,  we 
assessed  how  well  each  can  provide 
timely,  relevant,  accurate  and  useful 
information  directly  to  your  in-box. 

Overall  we  found  these  services  to 
be  very  useful  because  they  help  filter 
the  myriad  alerts.  With  these  services 
in  place,  IT  security  personnel  can 
then  focus  on  remediation  plans 
rather  than  combing  through  mailing 
lists  and  vendor  sites  culling  for  newly 
issued  alerts. 

When  the  data  analysis  dust  settled 
in  our  own  tests, Symantec’s  DeepSight 
Alert  Service  —  which  the  company 
picked  up  in  its  acquisition  of  Secu- 
rityFocus  last  year  —  came  out  as  our 
Clear  Choice  winner.  It  provides  the 
most  delivery  options,  very  detailed 
reports,  detailed  alert  category  config¬ 
uration  and  quick  response  times. 

Cybertrust’s  Alert  Manager  —  a  prod¬ 
uct  coming  from  the  merger  of 
TruSecure  and  Betrusted,  completed 
in  November  —  was  a  close  second, 
falling  behind  on  alert  delivery  op¬ 
tions,  but  standing  very  strong  on  alert 
information  and  format. 

We’d  also  put  the  services  from  Sec¬ 
unia,  PivX  and  SecurityGlobal  on  a 
short  list.  Secunia’s  Security  Manager  is 
one  of  the  least  expensive  services  in 
this  test  and  is  very  consistent  in  its  alert 
delivery.  The  interface  driving  PivX’s 
ThreatFocus  Diligence  is  intuitive  and 
therefore  makes  the  service  very  easy  to 
use.  And  SecurityGlobal’s  Security- 
Tracker  is  very  effectively  focused  in  its 
one  mission:  getting  alerts  pushed  out 
to  its  customers. 

The  services  generally  differentiate 
themselves  in  terms  of  how  each  col¬ 
lects  and  interprets  vulnerability  infor¬ 


mation.  Some  services,  such  as  Co- 
Logic  Security’s  E-Secure-IT  and  Sec¬ 
urityMob,  act  solely  as  data  aggrega¬ 
tors.  They  compile  information  gath¬ 
ered  from  hundreds  of  sources  — 
mailing  lists,  vendor  announcements, 
Web  site  scouring  and  direct  messages 
from  vulnerability  researchers  —  and 
then  send  pertinent  alerts  your  way.  E- 
Secure-IT  also  provides  a  collection  of 
security-focused  articles  from  hun¬ 
dreds  of  different  sources.  As  a  securi¬ 
ty  professional,  it  is  a  big  bonus  to 
have  all  this  information  collated  in 
one  place. 

The  other  services  tested  focus  on 
providing  information  and  analysis  for 
vulnerabilities  to  help  users  under¬ 
stand  how  quickly  they  need  to  react 
to  a  new  announcement.  Symantec 
and  Cybertrust  focus  on  broad  cover¬ 
age  and  perform  their  own  analysis 
and  write-ups.  And  both  perform  their 
own  testing  on  reported  vulnerabili¬ 
ties,  provide  detailed  threat  analysis 
and  remediation  options,  and  provide 
links  to  associated  vendor  patches. 
Security  Manager,  SecurityTracker  and 
ThreatFocus  Diligence  offer  their  own 
descriptions  but  generally  are  not  as 
in-depth  as  Symantec  and  Cybertrust. 

These  alerting  services  also  vary  in 
how  high  they  raise  the  red  flag  on 
any  particular  alert.There  seems  to  be 
a  general  tendency  to  set  the  risk  and 
severity  ratings  to  accommodate 
worst-case  scenarios,  which  some¬ 
times  can  be  misleading.  We  advise, 
based  on  that  observation,  that  users 
be  wary  about  basing  patch  deploy¬ 
ment  decisions  solely  on  these  ser¬ 
vices.  There  is  always  some  internal 
analysis  any  organization  must  per¬ 
form  to  see  how  fast  it  needs  to  react 
to  a  given  alert.  For  example,  an  alert 
announcing  an  Apache  server  vulner¬ 


ability  might  not  be  critical  to  an  orga¬ 
nization  that  only  runs  Apache  on  its 
intranet  Web  server.  But  a  company 
running  Apache  on  all  its  Internet-fac¬ 
ing  Web  servers  might  need  to  react 
immediately. 

SecurityTracker  doesn't  provide  any 
risk  information,  leaving  the  rating  de¬ 
cisions  solely  in  the  hands  of  the  orga¬ 
nization.  But  the  company  says  it  is 
adding  functionality  to  the  service  in 
the  near  future  that  will  help  organiza¬ 
tions  set  their  own  internal  risk  ratings. 
DeepSight  Alert  Service  stands  at  the 
opposite  end  of  this  spectrum,  provid¬ 
ing  analysis  and  a  l-to-10  rating  in  the 
areas  of  severity,  impact,  ease  of  ex¬ 
ploit  and  credibility.  The  remaining 
products  fall  somewhere  in  the  middle 
of  these  two  extremes. 

For  this  Clear  Choice  Test,  we  fo¬ 
cused  on  four  main  performance 


areas:  alert  information,  or  the  details 
provided  within  an  alert  distributed  by 
the  service;  alert  delivery,  which  in¬ 
cludes  timing,  methods  and  format; 
alert  management,  focusing  on  the 
GUI  used  to  access  and  configure  the 
service,  general  ease  of  use,  and  docu¬ 
mentation;  and  alert  coverage,  which 
looks  at  how  the  service  identifies 
new  security  issues  and  how  many 
products  it  covers  in  its  research. 

What  can  you  tell  me? 

In  the  alert  information  category,  we 
reviewed  the  classification  of  vulnera¬ 
bilities,  the  description  provided  for 
the  issue  and  the  suggested  remedia¬ 
tion  plan. 

Vendors  were  split  between  provid¬ 
ing  an  all-in-one  rating  (where  they 
would  simply  give  the  alert  a  high, 
medium  or  low  tag)  and  breaking  out 


Why  hire  a  vulnerability  alert  service? 

It’s  strictly  a  matter  of  time  management. 

It's  an  undisputed  fact  that  the  time  between  vendors  making  vulnerability 
disclosures  and  hackers  building  code  to  exploit  them  is  shrinking.  The  net 
gain  of  using  a  vulnerability  service  is  that  those  guarding  large-scale  net¬ 
works  will  spend  less  time  to  patch  these  holes. 

Vulnerability  alert  services  free  the  time  for  your  expensive  IT  security  staff 
to  do  the  hard-core  analysis  necessary  to  keep  your  network  protected  from 
the  latest  security  vulnerabilities. 

These  services  cull  the  available  vulnerability  information  outlets,  aggre¬ 
gate  the  data  on  new  security  announcements  and  help  customize  how  your 
security  staff  needs  to  be  fed  that  information.  With  these  services  in  place, 
security  administrators  readily  receive  relevant  alerts  and  can  spend  their 
time  addressing  them. 

Using  a  comprehensive  warning  system  like  those  we  tested  paired  with 
some  sort  of  trouble-ticketing  system  could  seriously  curtail  the  time  it  takes 
to  shore  up  your  network  against  a  newly  announced  vulnerability. 

—  Mandy  Andress 
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Company:  Secunia,  www.secunia.com. 
Cost:  Starts  at  $3,800  annually.  Pro: 
Consistent  response  times  on  sending 
alerts.  Con:  Text  alerts  should 
consistently  contain  same  information 
as  posted  on  the  Web  site. 


Company:  PivX  Solutions,  www. 
threatfocus.com.  Cost:  Starts  at  $1,990 
annually.  Pro:  Intuitive  interface  with 
useful  online  help.  Con:  Product  coverage 
not  as  broad  as  other  services. 
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different  areas  such  as  severity  or  possi¬ 
ble  impact. The  latter  offers  more  detail, 
which  can  be  very  useful  when  perform¬ 
ing  further  analysis. 

DeepSight  Alert  Service  provides  the 
best  overall  information,  breaking  risk 
ratings  into  severity,  impact,  ease  of 
exploit,  and  credibility  of  alert,  all  on  a 
scale  of  1  to  10.  (See  full  Symantec  re¬ 
port,  DocFinder:  5422.)  Alert  Manager 
breaks  things  out  into  urgency,  credibili¬ 
ty  and  severity  based  on  a  scale  of  1  to 
5. The  remaining  services  used  the  all-in- 
one  approach,  with  Security  Manager 
providing  the  best  breakdown  on  a  five- 
level  scale.  SecurityMob  uses  a  four-level 
scale,  ThreatFocus  Diligence  uses  three 
levels,  and  E-Secure-IT  issues  red  and 
yellow  alerts  for  significant  threats. 

Our  problem  description  assessment 
focuses  on  the  value  of  the  information 
included  within  the  advisory  to  explain 
the  issue. 

DeepSight  Alert  Service  and  Alert 
Manager  stand  out  in  this  area,  provid¬ 
ing  focused  reports  that  include  a  basic 
description,  detailed  impact  descrip¬ 
tion,  technical  description,  attack  sce¬ 
narios  and  exploit  links  (if  available). 
Alert  Manager  adds  a  comments  section 
where  their  analysts  may  provide  com¬ 
ments  on  the  security  issue  at  hand.  In 
our  test,  these  notes  provided  little 
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known  details  on  the  vulnerability  and 
high-level  discussions  on  how  to  prevent 
vulnerabilities  from  being  exploited. 

SecurityTracker,  Security  Manager  and 
ThreatFocus  Diligence  also  write  de¬ 
scriptions,  but  we  found  them  in  general 
not  to  be  consistent  in  the  level  of  detail 
they  offer. 

One  feature  we  would  like  to  see  added 
across  all  services  is  mapping  alerts  to 
Common  Vulnerabilities  and  Exposures 
(CVE)  entries  on  a  consistent  basis. This 
mapping  would  help  tie  reports  from  in¬ 
ternal  vulnerability  scans  and  intrusion- 
detection  system  reports  to  the  alerts 
posted  by  these  services. 

In  our  assessment,  the  most  important 
component  of  the  alerts  is  the  recom¬ 
mended  remediation  actions,  advising 
organizations  how  they  should  respond 
to  the  issue  at  hand. 

DeepSight  Alert  Service  provides  a 
comprehensive  list  of  links  to  vendor 
patches  and  workarounds.  While  useful, 
combing  through  this  long  list  can  be 
cumbersome.  Alert  Manager  discusses 
“safeguards”  for  preventing  this  vulnera¬ 
bility  in  the  first  place,  and  provides  links 
to  vendor  announcements  and  patches. 
We  found  that  with  both  of  these  ser¬ 
vices,  many  of  the  recommended  safe¬ 
guards  or  workarounds  reflect  general 
security  principals  that  companies 
should  have  in  place  as  part  of  their 
basic  infrastructure. 


SecurityTracker  does  not  perform  its 
own  remediation  analysis,  so  users  of 
this  service  will  have  to  rely  on  the 
remediation  actions  included  by  the 
entity  that  originally  discovered  and  re¬ 
ported  the  vulnerability  or  rely  on  a  ven¬ 
dor  announcement. 

Security  Manager  goes  back  and  forth 
between  providing  comprehensive  links 
to  vendor  patches  and  just  pointing  to 
the  original  source.  For  example,  in  the 
mod_include  Apache  vulnerability  we 
reviewed  in  detail,  Security  Manager 
only  referred  to  the  Apache  Web  site  to 
get  the  latest  source  and  not  any  of  the 
other  vendors  that  had  issued  updated 
Apache  packages. 

ThreatFocus  Diligence  also  provides 
links  to  patches  and  periodically  in¬ 
cludes  workaround  recommendations. 
These  recommendations  are  specific  to 
the  vulnerability  and  not  references  to 
general  security  practices. 

E-Secure-IT  and  SecurityMob  just  pass 
on  the  original  alert. 

How  can  you  reach  me? 

For  alert  delivery,  we  looked  at  the 
method  and  format  options  used  by  the 
service  and  the  timeliness  of  the  an¬ 
nouncement.  For  delivery  methods, 
DeepSight  Alert  Service  stands  out  with 
the  most  options,  including  e-mail,  Short 
Message  Service  (SMS)  mobile  text  mes¬ 
saging,  fax  and  voice.  All  services  pro¬ 


vided  e-mail  alerts  and  about  half 
offered  SMS  alerts.  SecurityTracker  is  the 
only  other  service  we  saw  that  provided 
voice  alerts,  which  occurs  through  a 
third-party  partner. 

Most  alerts  are  delivered  in  plain  text, 
but  some  offer  XML  and/or  HTML.  Alert 
Manager  sends  the  best  formatted  alerts, 
with  HTML  alerts  issued  in  a  column 
newsletter  format.  The  text  is  sometimes 
hard  to  follow  if  the  discussion  moves  to 
the  next  page,  because  you  expect  it  to 
continue  in  the  next  column,  not  the 
next  page. 

DeepSight  Alert  Service  is  the  only  ser¬ 
vice  currently  offering  PDF  delivery.  The 
reports  are  clear  and  easy  to  read. 
Security  Manager  delivers  alerts  in  text 
format,  but  includes  more  information 
and  has  a  better  presentation  for  the 
same  alerts  on  its  Web  site.  For  example, 
alerts  that  have  CVE  entries  associated 
with  them  are  only  shown  on  the  Web 
site.  ThreatFocus  Diligence  offers  text 
alerts,  including  how  the  alert  is  dis¬ 
played  in  the  Web  console.  We  would 
like  to  see  a  print  option  for  these 
ThreatFocus  reports. 

How  quickly  can  you  tell  me? 

Timeliness  of  alert  delivery  is  critical. 
For  our  sample  selection  of  alerts,  we 
made  sure  to  include  vendor  announce¬ 
ments,  issues  posted  to  mailing  lists,  older 
alerts  with  updates  and  open  source  soft- 


Alert  information  25% 


Alert  delivery  25% 


Alert  management  25% 
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Company:  SecurityGlobal.net,  www.securitytracker. 
com.  Cost:  Starts  at  $4,995  annually.  Pros:  Focused 
approach;  gets  the  alert  delivered  to  the  customer.  Con: 
Product  needs  a  better  alert  search  mechanism. 


Company:  SecurityMob,  www.securitymob.com.  Cost: 
Starts  at  $999  annually.  Pros:  Very  intuitive  user  interface; 
fast  response  time.  Cons:  Needs  a  search  mechanism 
for  supported  products;  product  coverage  not  as  broad 
as  other  services. 


Company:  Co-Logic  Security,  www.e-secure-it.com. 
Cost:  Starts  at  $4,995  annually.  Pro:  Alerts  include 
information  culled  from  security-related  articles.  Con: 
GUI  very  cluttered  and  not  easy  to  navigate. 
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DeepSight  Alert  Service  Alert  Manager 


Company:  Symantec,  www.symantec. 
com  Cost:  Starts  at  $4,995  annually.  Pros: 
Very  flexible  in  its  con 
figuration;  provides 
many  alert  delivery 
methods;  offers  very 
comprehensive  alert 
reports;  consistently  fast  alert  delivery. 
Con:  Lose  some  ease  of  use  with  the 
increased  flexibility. 
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Company:  Cybertrust,  www.cybertrust. 
com.  Cost:  Starts  at  $4,995  annually. 
Pros:  Excellent  alert  reports;  flexible 
configuration.  Con:  Alert  delivery  slower 
than  some  of  the  other  services. 


Security  Manager 


ThreatFocus  Diligence 


FREE 


Subscribe  today  at 

my.nww.com 

Enter  priority  code  B04A  and  SAVE  $129 
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We  registered  for  a  customer  account  for  each  of  the  six  services  tested. 
We  used  whatever  Web-based  tools  were  available  from  each  service 
to  set  up  an  e-mail  alert  profile  and,  whenever  possible,  established 
Short  Message  Service  text  alerts. 

We  first  focused  on  Windows  alerts  and  then  expanded  our  aiert  profile  to 
cover  the  full  list  of  products  sitting  on  our  test  network.  This  list  included 
Windows  (2000  Server  and  Workstation,  2003  Enterprise  Server  and  XP  Pro¬ 
fessional),  Red  Hat  (Fedora,  Red  Hat  9  and  Enterprise  Server  3.0),  FreeBSD, 
Apache  1.3  and  2,  IIS  5  and  6,  Snap  Server,  proftpd,  sendmail,  postfix,  samba, 
MS  Office  (XP  and  2003),  WebLogic  application  server,  Sophos  anti-virus, 
NetScreen  Technologies'  firewall,  F5  Networks  load  balancer,  Cisco  routers, 
Cisco  VPN  Concentrator  3000,  Network  Appliance  storage  appliance,  Brocade 
Fibre  Channel  switch,  Snort,  SOL  Server  2000,  Oracle  9i  and  OpenSSH. 

For  focused  alert  testing,  we  selected  five  announcements  ranging  from 
mundane  to  obscure  that  had  occurred  at  some  point  during  the  45  days  we 
tested  these  services,  For  each  announcement,  we  reviewed  the  classification 
of  the  alert,  the  detailed  information  provided  in  the  alert,  the  time  of  delivery 
of  the  alert,  and  the  general  format  and  layout  of  the  alert. 

The  alerts  selected  for  detailed  testing  include  the  Internet  Explorer  IFRAME 
vulnerability  (CAN-2004-1050),  Apache  modjnclude  vulnerability  (CAN-2004- 
0940),  Linux  kernel  IPTables  initialization  failure  (CAN -2004-0986),  Cisco  ISO 
DHCP  Denial  of  Service  (CVE-2004-1  111),  and  the  Solaris  Samba  buffer  over¬ 
flow  (CAN-2004-0686). 


ware.  DeepSight  Alert  Service  was  always 
the  fastest,  sometimes  issuing  alerts  days 
before  the  other  services.  SecurityMob 
alerts  also  were  always  issued  at  the  front 
of  the  pack.  Across  the  board, alerts  issued 
from  vendor  bulletins,  such  as  the  Sun 
and  Cisco  advisories  used  for  our  testing, 
generally  were  issued  the  day  the  vendor 
posted  bulletins. 

The  most  interesting  timeline  was  for 
the  IFRAME  vulnerability  posted  regard¬ 
ing  Internet  Explorer.  DeepSight  Alert 
Service  issued  a  bulletin  on  Oct.  25, 
2004,  the  day  the  original  issue  was  re¬ 
ported  on  the  Bugtraq  and  Full-Dis¬ 
closure  mailing  lists. 

The  remaining  services  issued  alerts  in 
early  November  when  the  proof  of  con¬ 
cept  exploit  code  was  posted  to  several 
security  mailing  lists.  E-Secure-IT  was 
dead  last,  posting  the  announcement  of 
the  release  of  the  Microsoft  patch  to 
address  the  issue  on  Dec.  1,  2004.  We 
could  not  find  any  other  mention  of 
IFRAME  in  a  full  search  of  their  alerts. 

In  another  instance,  SecurityTracker 
did  not  issue  an  alert  for  the  Sun  Samba 
bulletin  contained  in  our  test  sample,  as 
it  provided  no  new  information  over  the 
original  July  2004  announcement  of  the 
issue.This  happened  in  spite  of  Sun  issu¬ 
ing  a  security  bulletin  discussing  the  vul¬ 
nerability  on  Oct.  26, 2004.  All  other  ser¬ 
vices  alerted  on  the  bulletin  within  a 
day  of  its  release. 

Security  Manager  delivered  its  alerts  to 
us  in  batches  during  the  night.  We  con¬ 
sistently  received  these  alerts  the  night 
the  vulnerability  was  announced  or 
early  the  next  morning.  Alert  Manager 
generally  issued  the  alert  the  day  the 
vulnerability  was  announced,  but  was  a 
few  hours  later  than  the  other  services 
that  issued  that  day.  E-Secure-IT  was  fast 
on  major  vendor  bulletins,  but  very  slow 
on  issues  reported  on  mailing  lists  or  in 
open  source  tools. 

Managing  what  I  see 

Our  alert  management  tests  centered 
heavily  on  the  GUI  used  to  configure 
alert  profiles  and  view  alerts,  and  takes 
into  account  general  ease  of  use  and 
documentation. 

DeepSight  Alert  Service  employs  a 
three-step  method  for  alert  configura¬ 
tion.  You  set  up  the  delivery  method, 
establish  the  desired  technology  lists 
and  establish  your  monitors.  The  moni¬ 
tors  are  the  vehicles  that  combine  the 
delivery  methods  and  product  lists  into 
an  alert  profile.  Product  selection  for 
alerts  is  provided  by  an  excellent  inter¬ 
face  that  starts  you  off  by  choosing  a 
product  or  vendor  and  narrowing  the 
scope  from  there,  such  as  limiting  to 
only  a  specific  version  of  a  product.  In¬ 
clusions  and  exclusions  can  be  identi¬ 
fied  during  any  step,  making  for  a  very 
flexible  interface. 

Alert  Manager  has  a  similar  setup  for 
product  selection,  but  the  interface  is 
not  as  smooth.  To  set  up  alerts,  you  cre¬ 
ate  a  product  set  and  add  products  to 


these  profiles.  E-Secure-IT  provides  a 
plethora  of  information  on  advisories 
and  security-related  articles,  more  than 
any  other  service,  but  the  interface  is  not 
very  elegant.  The  screen  is  very  clut¬ 
tered,  and  everything  is  based  on 
dynamically  generated  lists.  If  you  have 
a  lot  of  areas  you  are  watching,  this  list 
can  be  very  long. 

SecurityTracker  focuses  on  simplicity. 
The  management  interface  is  clean  and 
simple,  but  product  selection  is  one  very 
long  page  of  check  boxes.  It’s  difficult  to 
find  anything,  so  we  usually  resorted  to 
using  the  search  mechanism  in  our 
browser  to  find  what  we  were  looking 
for.  Look-up  functionality  and  the  ability 
to  select  specific  versions  of  products 
would  be  a  nice  addition. 

Security  Manager  takes  a  slightly  differ¬ 
ent  approach,  requiring  you  set  up  infor¬ 
mation  for  actual  servers,  not  just  prod- 
ucts.You  select  the  operating  system  and 
any  applications  running  on  the  system, 
and  set  the  alert  method.  Secunia  also 
offers  the  option  to  run  vulnerability 
assessment  scans  (using  Nessus)  on  ex¬ 
ternally  facing  IP  addresses. 

SecurityMob  has  a  very  clean,  elegant 
management  interface.  It  provides  a 
mechanism  called  the  “quick  build  pro¬ 
file”  that  presents  a  list  of  pre-built  profiles 
for  alerts,  such  as  Windows  and  virus 
alerts.  Adding  more  pre-built  profiles,  espe¬ 
cially  a  Unix  option,  would  help  differenti¬ 
ate  the  SecurityMob  service.  To  manually 
select  products  to  add  to  your  alert  profile, 
you  must  expand  through  a  tree-based  list, 
grouped  by  product  function.  A  search 
mechanism  is  not  included  to  find  a  spe¬ 
cific  product. 

ThreatFocus  Diligence  also  needs  to 
add  a  search  mechanism  to  make  it  easy 
to  find  products  to  alert  on.You  currently 
scroll  through  a  list  of  vendors  and  then 
select  the  available  product  category  to 
monitor.  Selecting  specific  versions  also 
would  be  useful.  ThreatFocus  Diligence 
also  includes  assessment  scans. 

For  general  ease  of  use,  SecurityMob, 
SecurityTracker  and  ThreatFocus  Dili¬ 
gence  were  the  most  intuitive.  DeepSight 
Alert  Service  was  easy  to  use,  but  its 
complexity  requires  a  little  guidance 
from  the  documentation  at  the  begin¬ 
ning.  Our  experience  with  Alert  Manager 
was  very  similar  and  required  us  to  read 
through  the  documentation  to  under¬ 
stand  how  to  set  up  profiles  and  alerts.  E- 
Secure-IT  provides  so  much  information 
that  looking  at  the  interface  is  a  bit 
daunting  at  the  beginning.  While  you  get 
used  to  it,  the  overall  experience  of  this 
service  could  be  greatly  improved  with 
a  new  Web  interface. 

While  documentation  is  not  as  critical 
with  vulnerability  alert  services  as  it  is 
with  other  security  products,  you  still 
need  a  mechanism  to  answer  your  ques¬ 
tions  as  you  use  the  service.  DeepSight 
Alert  Service  and  Alert  Manager  provide 
the  best  documentation  with  user 
guides  and  online  help.  E-Secure-IT  also 
provided  hard  copy  documentation  to 


help  understand  how  to  best  use  the  ser¬ 
vice.  ThreatFocus  Diligence  includes  a 
strong  online  help  section,  but  Security¬ 
Tracker,  Security  Manager  and  Security¬ 
Mob  provide  minimal  online  help  for 
the  management  console. 

What  products  can  you  tell  me  about? 

An  alert  service  is  not  useful  if  it  does  not 
provide  valuable  information  on  the  prod¬ 
ucts  you  are  interested  in. To  evaluate  how 
well  each  service  hits  this  mark,  we  gener¬ 
ated  a  list  of  products  we  wanted  to  moni¬ 
tor  and  attempted  to  set  up  the  proper  alert 
profile  for  our  environment. 

SecurityMob  and  ThreatFocus  were  the 
only  two  that  did  not  cover  all  the  prod¬ 
ucts  in  our  test  bed.  Both  did  not  cover 
BEA  Systems’  WebLogic  or  F5  Networks 
products.  SecurityMob  did  not  support 
monitors  for  the  Brocade  storage  switch, 
the  NetScreen  Technologies  Firewall  or 
the  Cisco  VPN  Concentrator  3000  in  our 
test  bed.  ThreatFocus  did  not  monitor 
the  SnapServer,  Network  Appliance  stor¬ 
age  device  or  Sophos  anti-virus  software 
in  our  test. 

From  these  tests,  we  can  glean  that 
these  services  can  help  make  corporate 
security  teams  more  efficient,  by  letting 
them  outsource  research  services  to 
companies  that  define  this  work  as  their 
own  core  competency. 

The  main  surprise  in  our  testing  was 
the  differences  in  the  timing  of  alert 
delivery  across  the  services.  We  expect¬ 
ed  them  to  be  closer  together  and  not 
have  some  services  days,  or  even  weeks, 
behind  issuing  alerts. 

In  the  end,  our  testing  showed  Syman¬ 
tec’s  DeepSight  Analyzer  to  be  the  best 
all-around  service,  with  Cybertrust’s 
Alert  Manager  following  very  close 
behind,  but  keep  in  mind  that  you  also 
pay  a  premium  for  the  added  features. 
SecurityTracker,  ThreatFocus  Diligence 


and  Secunia’s  Security  Manager  are  very 
solid  services  that  can  come  in  at  a 
lower  price  for  the  cost-conscious  orga¬ 
nization.  E-Secure-IT  and  SecurityMob 
function  mostly  as  content  aggregators, 
passing  on  original  source  material 
without  any  additional  analysis. 

Regardless  of  the  price,  the  key  when 
selecting  a  service  is  to  ensure  it  is  com¬ 
patible  with  your  environment  —  how 
you  want  to  receive  alerts,  information 
you  want  to  receive  in  your  alerts  and, 
most  importantly,  that  it  covers  all  of 
your  products. 

Andress  is  president  of  ArcSec  Technol¬ 
ogies,  a  security  company  focusing  on 
product  reviews  and  analysis.  She  can  be 
reached  at  mandy@arcsec.com. 


Andress  also  is  a  member  of  the  Network 
World  Lab  Alliance,  a  cooperative  of  the  pre¬ 
mier  testers  in  the  network  industry,  each 
bringing  to  bear  years  of  practical  experience 
on  every  test.  For  more  Lab  Alliance  informa¬ 
tion,  including  what  it  takes  to  become  a  part¬ 
ner,  go  to  www.nwfusion.com/alliance. 

Other  members:  John  Bass,  Centennial 
Networking  Labs,  North  Carolina  State 
University;  Travis  Berkley,  University  of 
Kansas:  Jeffrey  Fritz,  University  of  California, 
San  Francisco;  James  Gaskin,  Gaskin 
Computing  Services;  Thomas  Henderson, 
ExtremeLabs:  Miercom.  network  consultancy 
arid  product  test  center;  Christine  Perey, 
Perey  Research  &  Consulting;  Barry  Nance, 
independent  consultant;  David  Newman, 
Network  Test:  Thomas  Powell,  PINT;  Joel 
Snyder,  Opus  One;  Rodney  Thayer,  Canola  & 
Jones. 


Microsoft  Operations 
Manager  2005 


Got  a  Windows  server  problem?  Just  ask  MOM 


BY  BARRY  NANCE,  NETWORK  WORLD  LAB  ALLIANCE 


®  f  you  want  to  stay  ahead  of  server  failures,  server  capacity  problems  and  server- 
gill  related  network  outages,  Microsoft  Operation  Manager  2005  can  help.  On  a  small 
SB  to  midsize  network  with  Windows  2000  Server  systems  and  above,  MOM  2005 
can  do  a  good  job  of  getting  and  reporting  server  status  and  health  information. 


We  recently  tested  MOM  2005  and 
found  that  while  it  used  more  bandwidth 
than  expected,  and  was  not  useful  as  a 
monitoring  tool  for  router-  or  switch-relat¬ 
ed  infrastructure  problems,  it  did  a  good 
job  monitoring  Windows-based  servers. 

MOM  2005  is  the  latest  incarnation  of  a 
product  originally  from  Mission  Critical 
Software  (which  was  bought  by  NetlQ 
and  then  bought  by  Microsoft)  .The  latest 
version  of  MOM  sports  several  user  inter¬ 
face  improvements,  new  monitoring 
capabilities  and  a  new  report  generation 
mechanism. 

Eye  on  Windows  Server 

On  Win  2000  and  2003  servers  (but  not 
Windows  NT),  MOM  2005  agents  can 
track  every  possible  Windows  perfor¬ 
mance  and  capacity  metric  you  can 
think  of.  Microsoft  offers  separately  li¬ 
censed  Management  Packs  for  applica¬ 
tions  and  environments  (see  graphic). 
Microsoft  publishes  a  programming  inter- 


M  Results 


OVERALL  RATING 


Company:  Microsoft,  www.microsoft.com 
Cost:  $729  per  server  plus  $539  per  server 
for  managed  devices,  plus  the  cost  of  a 
SQL  Server  2000  license.  Pro:  Excellent, 
detailed  monitoring  ofWindows  Server 
operating  system  and  application 
instances.  Cons:  Used  more  bandwidth 
than  we  expected;  Windows-centric; 
not  useful  for  monitoring  switches 
and  routers. 


The  breakdown 


Monitoring  20% 


Taking  action  20%  5 


Platform  support,  scalability  20% 


Reports  20% 


Ease  of  use  10% 


Documentation,  installation  10% 


TOTAL  SCORE 


3.5 


Scoring  Key:  5:  Exceptional;  4:  Very  good;  3: 
k  Average;  2:  Below  average:  1:  Consistently 
subpar 

•, V'-v 


face  a  third-party  vendor  can  use  to  cre¬ 
ate  a  Management  Pack  for  that  vendor’s 
server-based  software.  We  found  that 
MOM  2005  integrates  well  with  HP’s 
OpenView  and  IBM’s  Tivoli  network  man¬ 
agement  systems. 

The  system  can  work  with  agents  or  go 
agent-less,  via  the  Windows  Management 
Instrumentation  (WM1)  and  Remote  Pro¬ 
cedure  Call  (RPC)  interface.  The  MOM 
2005  agents  help  it  detect  problems 
quicker,  scale  better,  and  give  more  infor¬ 
mation  to  administrators,  planners  and 
troubleshooters.  The  agents  used  less 
bandwidth  than  the  agent-less  WMI  envi¬ 
ronment.  Agents  also  aren’t  always  op¬ 
tional.  For  example,  the  Active  Directory 
management  pack  requires  that  you 
install  agents  on  all  domain  controllers, 
and  we  found  monitoring  agent-less 
servers  through  firewalls  problematic 
because  firewalls  typically  do  not  allow 
the  passage  of  RPC  messages. 

Our  test  focused  on  MOM’s  ability  to 
monitor  Windows  Server,  Exchange  and 
SQL  Server  (see  How  we  did  it  at  www. 
nwfusion.com,  DocFinder.  5432).  In  the 
Windows  Server  tests,  MOM  2005  indicat¬ 
ed  when  problems  arose  in  an  Active 
Directory  database.  It  alerted  us  to  server 
CPU  utilization,  disk  space,  low  memory 
and  network  adapter  problems.  It  moni¬ 
tored  the  Windows  registry  server  back¬ 
ground  programs,  printer  status  and  sys¬ 
tem  registry  health.  The  system  excelled 
in  checking  whether  service  pack  and 
specific  Knowledge  Base  patches  had 
been  applied. 

When  monitoring  Exchange,  the  man¬ 
agement  pack  gave  a  helpful  topological 
view  of  each  server  and  its  configuration. 
The  Exchange  Management  Pack  pri¬ 
marily  used  WMI  to  discover  server  status 
and  health  information.  When  we  com¬ 
bined  Exchange  Server  2003  with  Outl¬ 
ook  2003,  we  were  impressed  to  find 
MOM’s  management  pack  also  moni¬ 
tored  client  Outlook  connections.  But  we 
were  disappointed  that  the  Exchange 
management  pack  did  not  send  and 
receive  actual  e-mails  to  know  whether 
Exchange  was  really  up  and  running. 

In  our  SQL  Server  tests,  MOM  2005  suc¬ 
cessfully  monitored  several  database 
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MOM  2005's  diagram  view  shows  Windows  Server  status  and  health  at  a  glance. 


parameters  and  metrics,  including  con¬ 
nectivity  concurrent  users,  table  and  row 
locks,  database  space  usage,  log  space 
usage,  CPU  utilization,  I/O  activity  and 
outstanding  queries. 

Notifications,  reports  and  ease  of  use 

MOM  2005  notified  us  of  problems  via 
e-mail,  pager,  log  file  entries  and  SNMP 
alerts.  For  anticipated  problems,  such  as  a 
runaway  server  application  (infinite 
loop), we  specified  scripts  that  MOM  2005 
ran  to  automatically  correct  the  problem. 
The  corrective  action  consisted  of  restart¬ 
ing  a  stopped  service,  running  an  external 
program  or  rebooting  a  server. 

Report  tools  rely  on  SQL  Server  2000 
Reporting  Services,  which  let  us  easily 
export  the  reports  in  several  formats, 
including  Excel,  Adobe  Acrobat  PDpWeb 
page  or  XML.  The  built-in  reports  were 
generally  adequate  for  analyzing  prob¬ 
lem  histories,  but  we  think  capacity  plan¬ 
ners  will  want  to  use  Reporting  Services 
to  create  custom  reports  geared  to  track¬ 
ing  resource  utilization.  Reporting  Serv¬ 
ices,  which  requires  Visual  Studio  .Net 
visual  design  environment,  was  less  flexi¬ 
ble  than  other  report  tools. 

The  system  uses  Microsoft  Manage¬ 


ment  Console  to  provide  administrator, 
operator  and  reporting  console  user  in¬ 
terfaces.  The  administrator  console  con¬ 
figures  MOM  2005  and  changes  the  rules 
for  controlling  agent  behavior.The  opera¬ 
tor  console  has  navigation,  context,  detail 
and  task  windows.  It  will  appear  familiar 
to  Outlook  users,  but  because  it  tries  to 
display  all  MOM’s  alerting  and  trou¬ 
bleshooting  information  in  a  generic 
Outlook  format,  we  found  it  confining 
and  unproductive.  The  reporting  console 
controls  the  display  of  event,  alert  and 
performance  reports  via  a  Web  browser. 

The  topological  network  graphs  are 
done  well,  and  they  help  show  the  big 
picture  of  the  network.  Another  plus  is 
MOM  2005’s  ability  to  generate  Visio  dia¬ 
grams  depicting  the  servers  it  monitors. 

MOM  2005  is  worthwhile  if  you  have 
Windows  servers  that  need  close  moni¬ 
toring  and  if  you  have  a  separate  tool  for 
monitoring  switches,  routers  and  non- 
Windows  servers. 

Nance  mns  Network  Testing  Labs  and  is 
the  author  of  Introduction  to  Networking, 
4th  Edition  and  Client/Server  LAN  Pro¬ 
gramming.  He  can  be  reached  at  barryn@ 
erols.com. 
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Why  network 
and  systems 
mgmt.  mergers 
fall  short 

■  BY  DENNIS  DROGSETH 

The  majority  of  mergers  and  acquisitions 
fail  to  reach  their  desired  ends.  So,  what 
constitutes  success  in  M&A  for  network 
systems  management?  The  presumed 
answer  is  something  better  than  basic 
addition  —  in  which  there  is  a  modest 
additive  value  and  that's  it.  Embarking  on 
any  M&A  for  minimal  gains  is  just  not 
worth  it  when  the  risks  involved  in  inte¬ 
grating  cultures,  technologies  and  cus¬ 
tomers  often  result  in  an  equation  where 
even  minimal  additive  value  fails  to  mate¬ 
rialize,  and  the  entirety  begins  to  shrink 
and  sometimes  crumble.  Failures  in  NSM 
products  abound  —  ranging  from  asset 
management  to  root-cause  analysis  to 
attempts  to  embrace  service  provider  mar¬ 
kets  for  enterprise  products,  to  service- 
provider-centric  products  trying  to  build 
towards  the  enterprise.  Most  NSM  failures 
result  from  one  or  more  of  the  following: 

•  Traditional  M&A  problems  across  all 
markets  —  in  which  the  two  companies  re¬ 
main  fundamentally  incompatible.  The  re¬ 
sult  is  that  talent  leaves,  and  customers 
jump  ship.  The  acquiring  company  is  left 
with  dueling  brands  and  a  lot  of  overhead. 

•  Classic  problems  in  NSM: 

•  A  company  with  simple,  easy-to-use 
software  and  minimal  sales  and  services 
capabilities  acquires  a  highly  complex 
technology  that  cannot  mature  without 
strong  growth  in  either  in-company  "feet 
on  the  street,"  or  an  enlightened  and  lucky 
channels  strategy  or  both. 

•  A  company  acquires  another  to  expand 
its  market  footprint  and  customer  base  with 
minimal  functional  synergy  and  a  less-than- 
zero  plan  for  product  integration.  In  some 
cases  the  synergy  is  there,  but  the  company 
leadership  fails  to  see  it.  An  asset  manage¬ 
ment  company  focused  on  larger  corpora¬ 
tions  acquired  a  performance  and  root- 
cause  company  focused  on  mid-tier.  There 
was  long-term  potential  there,  but  it  would 
have  required  visionary  architectural  and 
market  leadership.  There  was  wheel  spin¬ 
ning  and  ultimately  implosion. 

•  A  less  drastic  type  of  failure  occurs 
when  large  companies  acquire  smaller 
companies  with  powerful  enabling  tech¬ 
nologies,  but  then  corporate  politics  and 
the  "not-invented-here"  syndrome  inter- 
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venes,  and  the  new  technologies  become 
isolated  among  a  set  of  feuding  kingdoms. 
The  result  is  that  stunning  new  capabilities 
for  problem  resolution,  or  auto-discovery  or 
service  visualization  and  business  align¬ 
ment,  become  siloed  offerings.  Customers 
are  then  faced  with  costly  accessories 
rather  than  next-generation  innovation. 


These  and  other  bad  habits,  once  the 
norm,  are  gradually  becoming  superseded 
by  a  new  focus  on  truly  building  more 
innovative,  integrated  and  well-designed 
systems.This  is  the  beginning  of  a  long  up¬ 
hill  climb,  as  disparate  development,  sales 
and  marketing  teams  have  to  learn  to  work 
together  to  face  new  and  even  more  de¬ 


manding  challenges  than  they  would  have 
faced  separately 

Drogseth  is  a  vice  president  with 
Enterprise  Management  Associates,  an 
analyst,  market  research  and  IT  consulting 
firm  in  Boulder,  Colo.  He  can  be  reached  at 
drogseth@enterprisemanagement.com 
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Does  your  VoIP 
service  match  POTS  quality? 


turn-up 


troubleshooting 


service  assurance 


IP-Phone  Emulation 
Call  Signaling  Verification 
Voice  Quality  Testing 


Real-time  Packet  Capture 
Mean  Opinion  Score  (MOS) 
VoIP  QoS  Impairment  Alerts 


Fault  Isolation  &  Trouble  Identification 
End-to-End  Service  Verification 
Remote  and  On-site  Testing 


Not  without  Acterna’s  VoIP  Test  and  Management  Portfolio. 

Acterna’s  bundled  sets  of  instruments,  systems,  and  software  let  service  providers  and  enterprises  see  and 
hear  how  their  VoIP  service  is  performing.  With  initial  field  service  turn-up,  complex  troubleshooting  and  root- 
cause  problem  identification  throughout  the  network,  and  on-going  service  verification,  the  message  comes 
through  loud  and  clear.-  Your  VoIP  service  matches  POTS.  For  all  the  details,  please  visit  acterna.com/VolP. 
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■  BUSINESS  JUSTIFICATION 


IT  hiring  inches  upward 

Companies  cautiously  seek  to  increase  IT  staff  with  network,  security  and  business  skills. 


■  BY  JENNIFER  MEARS 

John  Halamka,  CIO  of  Harvard  Medical  School  and  CareGroup 
Healthcare  System  in  Boston,  has  an  aggressive  project  on  his  plate 
this  year:  He’s  wireless-enabling  all  2  million  square  feet  of  his  enter¬ 
prise  campuses.  To  do  it,  he’s  increasing  his  IT  staff  of  200  by  five 
positions,  which  require  network,  wireless  or  security  expertise. 

The  wireless  network  will  play  a  variety  of  roles,  from  carrying  sensitive  patient  data  to 
giving  patients  and  their  families  a  link  to  the  Internet  to  moving  VoIP  packets  to  sup¬ 
porting  RFID. 

“If  you’re  going  to  run  all  four  of  these  modalities  over  a  wireless  network,  each  of 
which  has  a  different  security  profile,  you’re  going  to  need  some  people  to  manage  the 
rollout  of  that  network,  the  day  to  day  operations,  the  security  configurations,”  Halamka 
says. 

It’s  people  Halamka  currently  doesn’t  have  in-house.  Lucky  for  him,  his  budget  is 
increasing  2%  this  year,  which  gives  him  the 
$500,000  or  so  he  needs  to  fill  the  new 
positions. 

Halamka  is  not  alone.  After  several  years  of 
budget  cutbacks,  the  technology  industry 
once  again  is  expecting  budget  growth  in 
2005. Analyst  firms  predict  tech  spending  will 
rise  in  the  mid-single  digits.  IDC  pegs  growth 
at  about  6%,  or  $60  billion. 

Along  with  that  growth  comes  hiring.  While 
IT  managers  remain  cautious  when  it  comes 
to  full-time  staffing,  analysts  say  an  uptick  in 
budgets,  coupled  with  a  slow  return  to  pro¬ 
ject  rollouts  —  such  as  Halamka’s  wireless 
effort  —  and  the  enforcement  of  govern¬ 
ment  regulations  such  as  the  Health 
Insurance  Portability  and  Accountability  Act 
and  Sarbanes-Oxley  will  result  in  a  slight 
jump  in  the  number  of  IT  positions  created 
this  year. 

“We’re  continuing  to  see  improvement  in 
the  market”  says  Katherine  Spencer  Lee, 
executive  director  of  IT  staffing  firm  Robert 
Half  Technology  (RHT).“It’s  not  yet  what  it 
was  in  the  dot-com  boom,  but  it’s  certainly 
marked  improvement.” 

Indeed,  RHT’s  survey  of  more  than  1,400 
CIOs  last  year  found  that  11%  of  the  execu¬ 
tives  polled  planned  to  add  IT  staff  early  in 
2005,  compared  with  9%  who  planned  addi¬ 
tions  in  2004. While  2%  of  the  CIOs  anticipate 
cutbacks  this  year,  that’s  fewer  than  the  6% 
who  planned  cuts  a  year  earlier.  Eighty-six 
percent  of  the  respondents  expected  to  nei¬ 
ther  add  nor  cut  positions  in  2005,  and  1% 
said  they  didn’t  know  yet  what  their  hiring 
plans  would  be  for  this  year. 

Business  expansion  is  the  main  driver  of  IT 
hiring,  and  network  expertise  is  the  most  in- 


demand  specialty,  according  to  RHT.  At  the  same  time,  Windows  and  Cisco  network 
administration  continue  to  be  hot  skills,  while  expertise  in  security, storage, VoIP  and  Web 
services  are  also  at  the  top  of  IT  hiring  managers’  lists. 

With  the  rush  of  mergers  and  acquisitions  already  starting,  analysts  say  expertise  in 
integration  will  be  important.  Business  intelligence,  messaging,  Linux  and  open  source, 
wireless  and  CRM  skills  also  will  be  in  high  demand. 

Premium  pay 

David  Foote,  president  and  chief  research  officer  for  Foote  Partners,  says  one  interest¬ 
ing  trend  he’s  seeing  is  an  upturn  in  pay  for  network,  collaboration  and  application 
development  skills.  Pay  for  those  areas  was  declining  as  much  as  12%  last  year. 

Part  of  the  reason  is  that  companies  are  finding  that  offshore  outsourcing  carries  more 
risks  than  they’d  like,  and  they’re  putting  more  value  into  the  resources  they  have  in- 
house,  Foote  says. 

“There  no  doubt  have  been  disappointments  in  offshore  outsourcing,”  he  says.“It  may 
be  cheaper,  but  it’s  not  foolproof,  and  companies  have  reassessed  what  should  be  out¬ 
sourced  and  what  should  not _ Companies  realized  they  need  to  adjust  pay  accord¬ 

ingly  to  retain  their  best  people.” 

Pay  for  areas  such  areas  as  security  and  Linux,  which  were  red-hot 
last  year,  is  starting  to  cool  because  there  are  now  more  people 
available  who  possess  those  skills. 

It’s  clear  that  demand  is  still 
there:  At  The  Pennsylvania 
State  University  the  hunt  is  on 
for  people  with  Linux  or  Unix 
skills. 

“Our  internal  direction  is  to 
move  whatever  we  can  from 
Windows  servers  to  Linux  on 
the  mainframe,”  says  Robert 
O’Connor,  IS  manager  at  the 
university  in  State  College,  Pa. 

As  a  result,  O’Connor,  who 
heads  up  the  university’s  ad¬ 
ministrative  information  ser¬ 
vices  division,  says  he  added 
one  employee  with  Unix  skills 
in  December  and  this  year 
plans  to  add  two  more  with 
either  Linux  or  Unix  skills  to 

his  staff  of  about  130. 

But  having  isolated  technical  expertise  is  not  enough.  Across  the 
board,  analysts  and  hiring  managers  stress  the  importance  of  being 
able  to  apply  technical  knowledge  in  the  business  world. 

At  General  Motors,  for  example,  in-house  IT  is  inexorably  linked  to 
business.  The  carmaker’s  1,950  internal  IT  staff  plays  a  governance 
role,  overseeing  myriad  IT  vendors,  says  Chris  Tipton,  director  of  glob¬ 
al  IS  and  services  human  resources  at  GM  in  Detroit. 

GM  isn’t  planning  to  add  staff  in  the  U.S.,but  might  fill  out  in  areas 
globally  where  the  business  is  expanding, Tipton  says.  In  the  U.S.,  hir¬ 
ing  primarily  will  be  to  fill  vacated  positions. 

“The  kind  of  people  we  look  for  are  those  who  can  help  us  integrate 
across  business  processes, ’’Tipton  says.“People  who  can  play  in  both 
worlds.  People  who  understand  technology  but  who  also  understand 
business  process  and  how  to  make  them  work  together  —  going 
beyond  a  siloed  view  into  looking  at  how  business  processes  need 
to  work  together  to  make  something  happen  in  the  company’ ■ 
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What’s  hot 

More  than  1,400  CIOs 
surveyed  by  Robert 
Half  Technology 
expected  these  skills 
and  specialties  to  be 
in  the  highest  demand 
this  quarter: 

Skills  in  highest  demand* 


Windows 

administration 

75% 


Project 
management 

8% 

Internet/intranet 
development  8% 

Data/database  — 

management  9% 

Wireless  network 
management  53% 

SQL  Server  management  45% 

I  Cisco  network  administration  44% 

Active  Server  Page  development  38% 

I  Visual  Basic  development  37% 

.Net  development  29% 


Specialties  experiencing  the  most  growth 

Other/don't  know  Networking  20% 

21% 


Information 
security 

13% 


Help  desk/end- 
user  support 

11% 


Applications  development  1 0% 


Oracle  database  nBM|pB&28% 


Linux  administration 

28% 

XML  development 
26% 


^Multiple  responses 
were  allowed. 


SOURCE:  ROBERT  HALF  TECHNOLOGY 


KVM  over  IP 


Cyclades  AlterPath”  KVM/net 
offers  a  unique  set  of  features: 

■  Server-based  authentication 

(NT  domain,  LDAP,  Secure  ID,  RADIUS,  TACACS+) 

■  16  and  32  port  models 

■  CAT5  cabling  up  to  500  feet 

■  User  access  logging 

■  System  event  syslog 

■  Integrated  power  management 


Over  80%  of  Fortune  1 00 
choose  Cyclades. 


rnaqic 


Secure  KVM  over  IP  switch 


Web -based  access 


Remote  i ncidfctiit  fesblutlo n 


We've  worked  our  magic. 
Now  you  can  work  yours. 


www.cyclades.com/nw 

1.888.cyc!ades  ■  sales@cyclades.com 


cyclades 


©2004  Cyclades  Corporation.  All  rights  reserved.  All  other  liodcmcrles  and  product  images  are  properly  of  their  respective  owners.  Product  mfwmoiian  jubfcu  t/  cox 


ISO'9001  2000 
QUALITY 


WZ  &'*r  .  v?  ; 
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How  Do  You 


Securely  Reboot 

•  •.-•■  .•;  'v 

via  IP? 


Sentry  Gives  You  Secure  Web/IP  Based  R  mot  Site  Management 


"NEW!"  Seci  e  Shell  (SSHv2)  Encryption  « 
MNE'  !"  SSLv3  Secure  Web  Browser « 
"NEW!"  Active  Directory  with  LDAP  « 
SNMP  MIB  &  Traps  « 
Integrated  Secure  Modem  « 
True  >ower  Monitoring  « 
Out  :t  Receptacle  Grouping  for  Dual-Power  Servers  « 
Fail-Safe  Transfer  Switch  for  Single-Power  Supply  Servers  « 
Power-up  Sequencing  Prevents  Power  In-rush  Overload  « 
Temp<  ature  &  Humidity  Environmental  Monitoring  « 
Zero  U  &  Rack-mount  Models  « 
1 1 0/208  VAC  Models  with  30-Amp  Power  Distribution  « 
NEBS  Approved  -48  VDC  Models  Available  « 


Server  Technology 


Solutions  for  the  Data  Center  Equipment  Cabinet 


When  sen  and  network  devices 
in  the  data  center  lock-up,  network 
managers  need  fast,  secure  and 
reliable  tools  to  respond.  W 
Sentry™  Remote  Site  Managers, 
an  administrator  can  immediately 
reboot  a  remote  system  with  just 
a  few  mouse  clicks.  Sentry ;  ,o 
provides  accurate  input  ci  rent 
power  monitoring,  environmental 
monitoring  and  integrated  sect  ? 
console  management  using  SSH. 


S  ver  Technology,  Inc. 


Server  Technology,  Inc. 
1040  Sandhill  Drive 
Reno,  NV  89521 
USA 


toll  free  +1.800.835.1515 

tel  +1.775.284.2000 
fax +1.775.284.2065 

www.servertech.com 

sales@servertech.com 


©Server  Technology,  Inc.  Sentry  is  a  trademark  of  Server  Technology.  Inc 
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GTA  FIREWALLS 
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our 


existing  family  of  Internet  firewall  products,  backed  by  over  1 0  years  of  Internet  security  experience  and  powered  by  ICSA  4.0  Corporate 
certified  GNAT  Box  OS. 

1-800-775-4GTA 


www.gta.com  •  info@gta.com 
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Anti-spam  technology  failing?  Well... 


YOU’VE  BEEN 

SCAMMED! 


Meridius  Security  Gateway" 

99%  spam  detection  rate, 

0%  false  positives, 

100%  virus  blocking1 


Call  1.866.895.6931  and  get  a  $5000*  trade-in  credit 


*  Contact  a  BlueCat  Networks  representative  for  promotion  details.  Limited  time  offer.  Promotion  code:  BCN-M105 
t  “Scanning  for  Spam",  Network  Computing  Magazine  Oct.  28.  2004 


BlueCat  Networks 

secure  networks,  simplified. 

Call  us:  Schedule  your  free  demo  today. 

1.866.895.6931  Visit  www.bluecatnetworks.com/meridius/nww 

BlueCat  Networks,  the  BlueCat  Networks  logo.  Meridius  Security  Gateway  and  the  Meridius  logo  are  trademarks  of  BlueCat  Networks,  Inc. 


<§>  INSIDETHEDDMAJN” 

www.bluecatnetworks.com/subscribe 
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ELECTRONICS 
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A  KVM  switch  allows  singly  or  multiple  ' 

'  workstations  ta  have  local  pr  remote  access  to 
-.multiple  computers  located  in  server  rooms  or 
?  -  on-  the  desktop  regardless  of  their  platforms 
and  operating  systems.  KVM  switches  have 
traditionally  provided  cost  savings  in  reducing 
energy  and  equipment  costs  while  freeing  up 
valuable  real  estate. 

'''r',.  .Recdgnfzed'a,s.the  pioneer  of  KVM  switch 
f  technology,  Rose  Electronics  offers  the 


SERVERS  WITHIN  YOUR  REACH 
FROM  ANYWHERE 


Local  or  Remote  Server  Management  Solutions 


Mm 


Industry's  most  comprehensive  range  of 
server  ipanagement  products  such  as  KVM 
•  -’  switches,  extenders  and  remote  access 

solutions:  Rose  Electronics  products  are 
.  known  for  their  quality,  scalability,  ease  of  use 

and  innovative  technology. 

■  ••  **:  +’•-  ■'  '  / 

■ 

Rose  Electronics  is  privately  held  with  world- 
headquarters  in  Houston,  Texas  and  sells  its 
products  worldwide  through  a  large  network  of 
Resellers  and  Distributors.  Rose  has 
operations  in  the  United  Kingdom,  Spain, 
Germany,  Benelux,  Singapore  and  Australia. 


¥ 


RackView™ 

KVM  RACK  DRAWER  WITH  KVM  SWITCH  OPTION 


Rose  Electronics 
10707  Stancliff  Road 
Houston,  Texas  77099 

ROSE  US  +281  933  7673 

ROSE  EUROPE  +44  (0)1264  850574 

ROSE  ASIA  +65  6324  2322 

ROSE  AUSTRALIA  +617  3388  1540 


UltraMatrix  Remote 

REMOTE  MULTIPLE  USER 
KVM  MATRIX  SWITCH 
ACCESS  OVER  IP  OR  LOCALLY 

•  Connects  1,000  computers  to  multiple  user  stations 
over  IP  or  locally 

•  High  quality  video  up  to  1280  x  1024 

•  Scaling,  scrolling,  and  auto-size  features 

•  Secure  encrypted  operation  with  login  and  computer 
access  control 

•  Advanced  visual  interface  (AVI) 

•  No  need  to  power  down  servers  to  install 

•  Free  lifetime  upgrade  of  firmware 

•  Available  in  several  models 

•  Easy  to  expand 

800  333  9343 

WWW.ROSE.COM 


UltraConsole 

PROFESSIONAL  SINGLE-USER 
KVM  SWITCH  SUPPORTS  UP 
TO  1000  COMPUTERS 

•  Connects  up  to  1000  computers  to  a  KVM  station 

•  Models  for  4,  8,16  computers 

•  Advanced  visual  interface  (AVI) 

•  Compatible  with  Windows,  Linux,  Solaris,  and  other  O/S 

•  Connects  to  PS/2,  Sun,  USB,  or  serial  devices 

•  Converts  RS232  serial  to  VGA  and  PS/2  keyboard 

•  Free  lifetime  upgrade  of  firmware 

•  Security  features  prevent  unauthorized  access 

•  Full  emulation  of  keyboard  and  mouse  functions  for  automatic, 
simultaneous  booting 

•  Easy  to  expand 


Terminal  server  vendors,  who  proclaim  that 
they  have  Secure  Out  Of  Band  products,  rely 
on  RADIUS,  TACACS+  and  other  in-band 
protocols  to  provide  security.  By  inference, 
they  imply  they  secure  out  ot  band  access 
when,  in  fact,  they  offer  only  network  security, 
which  conflicts  with  out  of  band  access. 


A  true  Secure  Out  of  Band  Management 
solution  should  provide  strong  security  without 
reliance  upon  network  based  protocols. 


GDI  offers: 


Hardware  encryption  over  dial-up 
and  network  connections 
RSA  certified  SecurlD  authentication 
without  a  network. 

Patented  centra!  management  of  all 
remote  devices 


Full  NIST,  FIPS  140-2  certifications  #-r 
Remote  Power  control 


Homologous  world-wide  approved  •~r 
internal  modems 


CDI  has  been  building  encryption  equipment  for  over  fifteen  years.  Our  customers  and  partners  include 
major  financial  institutions,  government  agencies,  major  telcos,  utilities,  and  the  United  States  military. 


Communication  Devices  Inc. 
www.outofbandmanagement.com 


SENSAPHONE-'5 

irvtB-anon 


Sends 

SNMP 

Messages 


Monitors 

64 

IP  addresses 


Embedded 

Web 

Server 


Sends 

E-Mail 


Power 

Outage 

Alarming 


Internal 

UPS 


IMS-4DDU 


Monitor*.  V‘'«" 


Halt  0 


7n 


Power  Ethernet 
Control  Port 
Interface 


Internal  Voice, 
Modem 
&  Pager  Port 


8  RJ-4S  Sensor  Inputs 

(Temperature,  Humidity, 
Water,  Motion,  Power, 
Smoke/Fire) 


Microphone 

for  Sound 
Monitoring 


BE  NOTIFIED  BEFORE  CRITICAL  EVENTS  TURN  INTO  DISASTER! 


•  Eight  environment  inputs 

•  Power  sensing 

•  Monitors  64  IP  addresses 

•  Send  alerts  to  64  people 

•  8  methods  of  contact 

•  Calendar  scheduling 

•  Expands  to  256  sensors 

•  Remote  power  control 

•  Optional  camera 


The  Sensaphone  IMS-4000  Infrastructure 
Monitoring  System  monitors  critical  environ¬ 
mental  and  network  elements  in  your  server 
room,  data  center,  or  telecomm  installation  and 
reports  to  you  instantly  when  events  threaten 
your  infrastructure.  The  IMS-4000  keeps  watch 
so  you  don't  have  to.  See  these  features  and 
more  on  the  web  at  www.ims-4000.com 


Tel:  877-373-2700 

Phonetics,  Inc. 
901  Try  errs  Road 

www.ims-4000.com 

Aston,  PA  19014 

-■ 
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Choose  a  network  analyzer  that  puts  you  in  the  driver's  sea 


-FORESIGHT- 


mm 


-CRPBEiTv  PiRnnine- 


How  much  does  your  network  analyzer  see? 


Observer  is  the  only  fully  distributed  network  analyzer  built 
to  monitor  the  entire  network  (LAN,  802.1  la/b/'g,  Gigabit, 
WAN).  Download  your  free  Observer  10  evaluation  today 
and  see  how  Observer  puts  you  in  the  driver's  seat  with  more 
real-time  statistics,  more  in-depth  analysis  and  more  network 
advantages  than  ever  before.  Choose  Observer. 


UK  &  Europe  +44  (0)  1 959  569880 

www.networkinstruments.com/analyze 


ZOOM  ARAL VS  IS 


-CRPRC  i  tv  PLRnn  i  no-  Determine  how  much  bandwidth 
your  router  will  need  based  on  historical  usage  patterns  with 
Network  Trending. 

-FORES  i  Ght-  Predict  how  network  changes  will  affect 
your  response  times  with  "What-lf"  Modeling  Analysis. 

-no  s  i  GRRi-  Find  rogue  access  points,  monitor  access 
point  load  and  scan  wireless  channels  continuously  with  over 
50  WLAN  Expert  Conditions. 

US  &  Canada  toll  free  800.526.5958 
fax  952.932.9545 


zoom  nriRLvsis 


Production  Tracking  Over  Ethernet 

Eliminate  your  shop-floor 
PCs  with ... 

Ethernet  Terminals  from 
ComputerWise  connected  to 
your  in-house  LAN. 

Capture  production  data 
directly  into  files  on  your 
server. 


•  Interactive  Telnet  Client 

•  TCP/IP  over  10/IOOBaseT  Ethernet 

•  Built-in  Barcode  Badge  Reader 

•  Optional  Mag-Stripe  &  RFID  Badge  Reader 

•  Auxiliary  RS-232  Serial  port 

•  Customizable  Data  Collection 


COMRTKKWISE. 

Call  1-800-255-3739  or  visit  www.computerwise.com 


Program  Included 
Larger  keyboard  and 
display  sizes  available 


lIDDSBIQi 

qbbbbssi 

bbbsosu 
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Features  C  Benefits 


Reading  someone 
else's  issue  of 

NetworkWorld? 

Subscribe  today  and  receive  your  own 
1-year  subscription  for  FREE  - 

a  $129.00  value! 


Go  to  http://subscribenw.com/mynw  for  your  free  subscription. 


Climate  Monitor 


Commwwenng  UvouQh  UKHnology 


If  it’s  on  the  X  WORLDWIDE  PROVIDER 


OF  NETWORK 
HARDWARE 
SINCE  1981! 


THE  NETWORK  SPECIALISTS 

WRCA»NET 


Memory 


•  Accessories 

sales@wrca.net  -  (800)699-9722x102 


$389 

Ethernet/Web 

Rack  Mounted 

Temperature 

Monitor  Multiple  Cabinet 

Air  Flow 

Humidity 

HTML  (no  client  needr  G 

Door  position 

SMTP  (e-mail  alerts) 

Sound 

SNMP  (MIB,  Traps) 

Light  Level 

Graphing 

Power 

Console 

Video  optional 

16  external  sensors 

O 

See  it  working  at: 

www .  I  r  W-ir.'v »  oq : 

http://63.237.104.17 

512-357-1*62 

IT  Resource  Sales  Engineer: 
Direct  promotion  of  the  compa¬ 
ny's  technical  services  to  large 
software  development/manufac¬ 
turing  clients;  maintain  commu¬ 
nication  with  existing  and 
prospective  clients  to  determine 
technical  requirements;  work 
with  field  consultant  personnel  to 
develop  estimates  and  imple¬ 
mentation  plans  for  proposed 
technical  projects;  answer  client 
questions  and/or  complaints 
regarding  the  company's  ser¬ 
vices  utilizing  knowledge  of  soft¬ 
ware  technology  applications 
including  Oracle,  Visual  Basic 
and  D2K  and  software  consult¬ 
ing  industry.  Requirements: 
Bachelor's  degree  in  Computer 
Science  or  Business  Admin,  and 
exp.  must  include  sales/market¬ 
ing  in  software  consulting  indus¬ 
try  and  knowledge  of  software/ 
technology  applications  includ¬ 
ing  Oracle,  Visual  Basic  and 
D2K  and  Powerbuilder  with  5 
yrs.  progressive  exp.  Salary: 
$72,045.  Apply:  Washington 
County  CareerLink,  ATTN:  CL 
Program  Supervisor,  Millcraft 
Center,  Suite  150LL;  90  West 
Chestnut  St.,  Washington,  PA 
15301-4517,  Refer  to  Job  Order 
No.  WEB  484751 . 


InfoPro  Solutions,  Inc.,  is  cur¬ 
rently  seeking  Project  Managers 
possessing  MS/BS  or  equiva¬ 
lent  and/or  relevant  work  experi¬ 
ence.  Duties  include:  Work 
closely  with  client  project  man¬ 
ager  and  team  to  develop  and 
execute  software  implementa¬ 
tion  plan;  act  as  liaison  between 
client  and  company;  Coordinate 
InfoPro's  training,  business  and 
technical  analyst  resources 
activities  for  the  implementation 
project;  Ensure  delivery  dates 
and  commitments  are  met; 
Assist  client  in  identification  and 
management  of  business  proc¬ 
ess  transition  areas;  Manage 
the  transition  of  the  project  from 
implementation  into  post-pro¬ 
duction  support  phase.  Back¬ 
ground  in  Supply  Chain,  MRP 
and/or  Inventory  control 
Systems  and  exp.  in  the 
Pharmaceutical  indistry  is 
desired.  Mail  resume,  refer¬ 
ences  and  salary  requirements 
to:  InfoPro  Solutions,  Inc.,  238 
Littleton  Road,  #207,  Westford, 
MA  01886. 


Seeking  qualified  applicants  for 
the  following  positions  in 
Memphis/Collierville,  TN: 
Senior  Programmer  Analyst. 

Formulate/define  functional 
requirements  and  documenta¬ 
tion  based  on  accepted  user  cri¬ 
teria.  Requirements:  Bach¬ 
elor's  degree*  or  equivalent  in 
computer  science,  MIS,  engi¬ 
neering,  mathematics,  business 
information  systems  or  related 
field  plus  5  years  of  experience 
in  systems/applications  develop¬ 
ment.  Experience  with  Oracle 
query  performance  tuning, 
Abinitio  ETL  Tool  and  Unix  Shell 
Scripting  also  required.  'Mast¬ 
er's  degree  in  appropriate  field 
will  offset  2  years  of  general 
experience.  Submit  resumes  to 
Joy  Stubbs,  FedEx  Corporate 
Services,  60  FedEx  Parkway, 
2nd  Floor  Horizontal,  Collierville, 
TN  38017.  EOE  M/F/D/V. 


SW  Eng'ers:  for  Mainebranch 
to  rsrch,  dsgn,  &  dev'lop  com¬ 
plex  sw  sys  w/  Websphere, 
C++,  Java,  PeopleSoft 
HRMS/EPM  on  Unix/AlX; 
Install  &  configure  PeopleSoft 
process  Server  &  Z/OS  w/ 
DB2  sys.  level  in  MVS/CICS 
&  Corba.  8-5,  40h/w,  BS  dgr 
in  Eng’g,  5  yr  wk  exp.  involv’g 
Websphere,  C++,  CICS. 
Resume  to  Mondraty  at 
ITsoftrecruite@yahoo.com 
fax:  305-704-1238 


COMPUTER/IT 

Amgen  has  opportunities  for 
Project  Associates  to  manage 
and  complete  highly  complex  IT 
projects.  Reqs.  include  related 
Master’s  Degree  or  equivalent 
and  exp  data  interfaces/conver¬ 
sion,  network/infrastructure  fun¬ 
damentals,  operating  system 
fundamentals,  system  and  data¬ 
base  design,  software  develop¬ 
ment  lifecycle,  web  technology, 
software  quality  methodologies, 
client  negotiations,  client  man¬ 
agement,  cost/schedule  estimat¬ 
ing  and  forecasting,  reporting 
project  metrics,  resource  man¬ 
agement,  and  system  validation. 
Job  site:  Thousand  Oaks,  CA. 
Send  a  copy  of  this  ad  and  your 
resume  to:  Kyle  Foster,  Amgen, 
One  Amgen  Center  Drive  MS 
19-1 -A.  Thousand  Oaks,  CA 
91320  Please  indicate  5V7NDA 
in  the  text  of  the  resume.  No 
phone  calls  please.  Employer 
will  only  consider  applicants 
authorized  to  work  for  any 
employer  in  the  US.  Amgen  is  an 
Equal  Opportunity  Employer. 


Sr  Developer/Consultant- 
Aflanta,  GA-Req.  BS/equiv 
Engg,  Comp.  Sci.,  or  related 
tech,  field  +  5  yrs  exp.  w/appli- 
cation  development,  quality 
assurance,  maintenance,  & 
implementation  of  database 
technology  for  commercial  sys¬ 
tems.  To  include  4  yrs  exp. 
w/MS-SQL,  ORACLE.  ASP,  JSP, 
XML,  CRM,  Microsoft  Visual 
Basic,  ODBC,  &  UNIX  or  Linux. 
Req  3  yrs  exp  w/financial/ 
accounting  or  job  shop  software 
systems.  Exp  may  be  gained 
concurrently.  Resumes  to:  Mr. 
John  Carroll,  Equinox  Corp¬ 
oration,  3922  Brinton's  Mill, 
Marietta,  GA  30062 


Computer  Programmer 
w/BS  degree  &  2  yrs. 
exp.  wanted  in  Salem, 
Oregon.  Send  resume 
to:  HR  Dept.,  Scicom 
Americas,  Inc.,  1500  S. 
Dairy  Ashford,  #241, 
Houston,  TX  77077. 


R  &  D  Engineer 

Design  embedded  software 
components  for  PC  connec¬ 
tor.  Analyze  collected  data 
using  MATLAB,  etc. 
Integrate  mouse  driver 
interface  and  image  pro¬ 
cessing  /  pattern  recogni¬ 
tion  into  software.  Design 
algorithms  to  analyze  real¬ 
time  data.  QMotions  Inc. 
1410  Third  Street  Unit  #  7 
Riverside,  CA  92507  Fax: 
(951)  786-9472 


Sr.  Software  Engineers 
needed.  Seeking  candi¬ 
dates  w/  MS  or  equiv  &  rel 
work  exp.  Part  of  rel  work 
exp  must  include  2  yrs 
working  w/  J2EE,  Web 
Services  &  JMS.  Duties 
include:  Develop,  test  & 
debug  systems,  programs 
and  apps.  Mail  resume  & 
refs  to:  EZ2  Technologies, 
Inc.,  6520  110th  Street, 
Suite  205,  Overland  Park, 
KS  66211. 


Senior  Software  Engineer  want¬ 
ed  to  build  and  manage  a  team 
of  developers  to  enhance  and 
develop  commercial,  n-tier,  web- 
based  data  applications.  Must 
have  Bachelor's  degree  in  Com¬ 
puter  Science  or  related  field, 
and  3  years  experience  devel¬ 
oping  commercial  n-  tier  web- 
based  database  applications  for 
legal  information  tracking  using 
ASP.VB,  Com+  transactional 
technology,  and  SQL  Server, 
including  experience  with  ad¬ 
vanced  components,  report  de¬ 
velopment  using  SQL  Reporting 
Sen/ices,  and  integration  with 
document  management/assem¬ 
bly  systems,  as  well  as  2  years 
experience  importing  data  from 
3rd  party  systems  and  designing 
software  installation  routines. 
(Experience  can  be  concurrent). 
Contact  Two  Step  Software  Inc., 
169  Elm  Street,  2nd  Floor,  Wal¬ 
tham,  MA  02453,  Attn:  Kristin 
Sheard,  HR  Coordinator. 


System  Analysts  needed.  BS  in 
Comp,  or  IT  field  and  rel.  work 
exp.  Exp.  must  include  1  yr.  w / 
VB,  C++,  SQL,  &  Unix.  Duties 
include:  Consult  w/  new  cus¬ 
tomers.  Eliminate  hardware, 
software,  &  networking  prob¬ 
lems.  Deploy  &  implement  com¬ 
plete  Navigo  system  at  client 
locations.  Analyze,  maintain,  & 
perform  upgrades  to  the  ITS 
computer  infrastructure  &  mis¬ 
sion-critical  servers.  Provide 
hardware/software  troubleshoot¬ 
ing  &  technical  supp.  Travel  up 
to  60%  to  client  sites  at  various 
U.S.  locations  to  set  up  systems 
&  interact  with  clients.  Work  w/ 
VB.Net,  ASP,  &  knowledge  of 
MS  operating  systems,  network, 
&  server  admin.  Send  resume, 
ref.,  and  sal.  req.  to  Interactive 
Touchscreen  Solutions,  Inc., 
1655  Crofton  Blvd.,  103  Crofton, 
MD  21114. 


WEBSITE  ANALYST  Maintain  & 
develop  global  intranet.  4  yrs  + 
exp.  in  object  oriented  program¬ 
ming 

&  dev.  for  major  international 
corporation,  including  Microsoft 
Content  Management,  Share- 
point, 

.Net  framework,  C#,  Java,  C++, 
SQL  Server,  Visual  Basic  &  XML 
on  Windows  platform.  Mail 
resume  to 

M.A.  Fazio,  ACE,  1601  Chestnut 
St.,  TL33K,  Phila,  PA  19103. 


Programmer  Analyst  II.  BS 
Comp  Sci  or  related  +  2  yrs 
exp  as  Programmer/  Prog¬ 
rammer  Analyst  or  similar. 
Req.  2  yrs  exp  w /  Property/ 
Casualty  Ins  &  dem  exp 
w/Actuate,  AQS,  ASP, 
Visual  Basic,  DHTML, 
COBOL  2,  JCL,  CICS,  X12, 
EDI,  SFTP,  PGP,  GnuPG, 
DB2,  SQL,  VSAM.  Send 
resume  to  Ben  Williams, 
GuideOne  Insurance,  1111 
Ashworth  Road,  WDM,  IA 
50265. 


SAP  Consultants  needed. 
Burlington,  MA  based  company 
has  positions  available  for  qual¬ 
ified  candidates  possessing 
MS/BS  or  equivalent  and/or  rel. 
work  exp.  Rel  work  exp.  must 
include  3  yrs.  working  w /  SAP 
ABAP,  EDI/ldoc,  &  Functional 
MM.  Duties  include:  Design, 
develop,  implement  and  cus¬ 
tomize  SAP  applications  for  var¬ 
ious  business  clients.  Maintain 
applications,  trouble  shoot  and 
provide  technical,  business,  cus¬ 
tomer  and  management  sup¬ 
port.  Configure  R/3  &  perfor¬ 
mance  tuning  of  the  application. 
Mail  resume  to  Iconsoft  Inc.  101 
Cambridge  Street  Suite  305 
Burlington  MA  01803. 


SYSTEMS  ANALYST  to  provide 
on-site  systems  consulting  in 
analysis,  design,  development, 
testing  and  implementation  of 
business  to  business  and  cross¬ 
platform  integration  of  applica¬ 
tions  in  the  financial,  supply 
chain  and  services  industries 
using  webMethods  integration 
tools,  J2EE,  Siebel  systems, 
Oracle  and  DB2  databases  on 
UNIX  and  AIX  platforms. 
Require:  B.S.  in  Computer 
Science  and  four  years  experi¬ 
ence  in  the  job  offered  or  as 
Integration  Developer  (M.S.  with 
two  years  experience  may  be 
substituted  for  B.S.  and  four 
years  experience).  40%  travel  to 
client  sites  within  the  United 
States  required.  Competitive 
salary  and  benefits,  40 
hours/week,  8  am  to  5  pm,  M-F. 
Mail  resume  to:  Vice  President, 
Frontline  Consulting  Services, 
Inc.,  8701  Mallard  Creek  Road, 
Charlotte,  NC  28262. 


BCCUSA  Inc-South  Portland, 
ME  needs  experienced  Pro¬ 
grammer  Analysts  having  a 
Bachelors  Degree  with  mini¬ 
mum  two  years  of  progressive 
work  exp  in  Analysis,  Design, 
Development  and  Testing  of  VB, 
ASP,  JSP,  Oracle,  SQL  Server, 
PL/SQL,  Access,  IIS,  XML, 
Javascript,  Oracle,  Crystal 
Reports  and  Macromedia 
Dreamweaver.  Must  have 
Automation  QA  exp  using 
Mercury  Suite  products.  Comp¬ 
etitive  salary  and  benefits.  M-F, 
40  hours/week.  Please  mail  your 
resume  to  BCCUSA  Inc.,  HR 
Dept,  650  Main  Street  Suite 
201,  South  Portland,  ME- 
04106. 


CIO-wanted  for  Ft.  Lauderdale 
firm.  Must  have  a  minimum  of  a 
Bachelor's  Degree  in  business 
or  Comp.  Sc  and  5+  years  of 
experience.  Must  have  experi¬ 
ence  in  leading  teams  in  creat¬ 
ing  franchising  operations  and 
management  software.  Must 
have  knowledge  of  developing 
and  supporting  software  to  be 
installed  in  Europe  and  the  Far 
East.  Please  send  resumes  to 
Dominique  March,  Esq., 
Coverall  North  America,  Inc., 
500  W.  Cypress  Creek  Road, 
Suite  580,  Ft.  Lauderdale,  FL 
33309. 


ATTENTION: 

Law  Firms 
IT  Consultants 
Staffing  Agencies 


Place  your 
Labor 

Certification  ads 
here! 

Are  you  frequently  placing 
legal! immigration 
advertisements? 

Let  us  help  you  put  together  a 
cost  effective  program  that  will 
make  this  time-consuming 
task  a  little  easier. 


Contact:  Danielle  Tetreault  at: 
800-762-2977 


IT 


careers 


Ads  Placed 
Weekly 


Didn’t  find 
the  IT 
Career 
Opportunity 
you  were 
looking  for? 


SSI  st 1 


111! 


Check  back  weekly 
for  fresh  job  listings 
placed  by  top 
companies 
looking  for  skilled  IT 
professionals  like  you! 


IT 


careers 


800-762-2977 
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NetworkWorM 

Event*  and  Executive  Forum* 


Network  World  Events  and  Executive 
Forums  produces  educational  events  and 
executive  forums  worldwide,  including  our 
one  day  Technology  Tours,  customized  on¬ 
site  training,  and  executive  forums  such  as  DEMO®,  DEMOmobile®,  and 
VORTEX,  as  well  as  the  DEMOIetter  and  VORTEX  Digest  newsletters.  For 
complete  information  on  our  current  seminar  offerings,  call  us  at  800-643- 
4668  or  go  to  www.nwfusion.com/events. 


Publicize  your  press  coverage  in 
Network  World  by  ordering  reprints  of 
your  editorial  mentions.  Reprints 
make  great  marketing  materials  and 
are  available  in  quantities  of  500  and 
up.  To  order,  contact  Reprint 
Management  Services  at  (717)  399- 
1900  x129  or  E-mail:  mshoben@reprintbuyer.com 
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Clockwise  from  top  left:  Dan  Lynch  with  winemaker  Gary  Galleron,  Chuck  and  Ann  McMinn  on  sorting  duty,  Bob 
Bressler  in  the  vineyard. 
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of  the  Netscape  Web  browser,  and  his 
was  one  of  the  first  such  firms  to  have  a 
Web  site. 

But  it’s  not  just  the  fermented,  bottled 
fruit  of  the  vine  that  has  netheads  such  as 
Halleck  turning  in  their  IT  hat  for  one  with 
a  wider  brim.There’s  a  whole  lot  more  to 
the  touchy-feelyness  of  wine  than  tending 
the  vines,  picking  the  grapes,  crushing 
them  or  quaffing  the  results.  All  of  these 
activities  involve  people,  a  community 
that,  despite  its  connotations  of  wealth 
and  snobbery,  is  highly  democratic. 

“If  I’m  on  an  airplane,  and  I  tell  the  per¬ 
son  next  to  me, ‘we  do  broadband  con¬ 
nections,’  they  go  back  to  reading  their 
Forbes  or  People"  says  Chuck  McMinn,  co¬ 
founder  in  the  mid-1990s  and  chairman  of 
one  of  the  earliest  DSL  broadband  ven¬ 
dors,  Covad. Today  he’s  also  owner  of  two 
vineyards  near  St.  Helena  in  Napa  Valley: 
Vineyard  29  and  Aida.“If  I  tell  them  I’m  in 
the  wine  business,  then  we  have  a  two- 
hour  conversation.They  identify  with  the 
making  of  wine,  with  the  consuming  of 
wine.  It’s  a  very  social  thing.” 

One  vital  characteristic  of  that  “social 
thing”  is  the  difference  between  living 
and  working  in  Silicon  Valley,  and  living 
and  working  in  one  of  the  wine  valleys. 
As  these  high  fliers  talk,  nearly  all  of 
them  express  a  sense  of  coming  home  to 
a  place  far  from  the  frenzy,  fear  and 
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loathing  of  high-tech 
competition. 

“In  Silicon  Valley  you 
have  to  be  very  careful 
to  protect  trade  secrets,” 
says  Bob  Bressler,  who 
moved  from  early  work 
on  ARPANet  to  being 
chief  scientist  at  Sun, 
where  he  focused  on 
the  issues  of  networking 
computers.  He  and  his 
wife  Stacey  own 
Bressler  Vineyards,  5 
acres  of  grapes  near 
downtown  St.  Helena. 

“But  here,  you  go  into  a 
local  restaurant  and 
you  trade  secrets. . . . 

[People  here]  want 
everyone  to  succeed.” 

Neophytes 

This  is  good  because 
when  most  of  these 
newcomers  started,  the 
only  thing  they  knew 
how  to  grow  was  rev¬ 
enue,  and  how  to  get  wine  out  of  a  bottle, 
not  into  it.  Halleck  had  several  vineyards 
as  clients,  and  was  commuting  to  Napa  for 
years  before  he  decided  to  find  a  property 
and  plant  his  own  grapes. 

Originally  from  Madison,  N.J., and  an  Ivy 
League  graduate,  McMinn  has  a  back¬ 
ground  in  Silicon  Valley  high-tech  start-ups 
and  venture  funding  during  the  Internet 
boom. 

Bressler  also  grew  up  in  New  Jersey 
and  endured  frozen  New  England  win¬ 
ters  for  years  before  moving  to 
California,  where  he  became  involved 
with  the  Napa  Valley  Wine  Auction,  an 
annual  charity  fundraiser.  The  Bresslers 
initially  bought  their  Napa  property  with 
retirement  in  mind  and  to  be  close  to  be 
part  of  a  community  used  to  drinking 
good  wine. 

But  a  friend,  well-known  vineyard  man¬ 
ager  David  Abreu,  came  over  to  see  the 
house  and  observed  the  Bresslers  had 
some  of  the  best  land  in  the  valley  for 
grapes.  He  asked  whether  they  would  be 
interested  in  planting  vines.“We  said 
something  like ‘Oh,  sure,’ and  the  next 
thing  we  knew  David’s  crew  showed  up 
and  started  clearing  land  and  planting,” 
Bressler  says. 

An  exception  to  this  group  of  high-tech 
veterans  is  Dan  Lynch,  self-described 
dilettante-slacker,  another  early  ARPANet 
veteran,  creator  of  the  annual  Interop 
show,  and  now  owner  of  Lynch  Vineyards 
in  Napa  Valley  For  one  thing,  he’s  a 
California  native  and  for  another  he’s  the 
only  one  of  the  four  with  even  a  modest 
background  in  agriculture.  As  a  grammar 
school  student,  he  had  a  passion  for 
growing  mint,  which  he  acknowledges  is 
as  difficult  as  growing  dandelions.  But  he 
was  soon  making  room  for  an  even 
greater  passion. “I  love  growing  cactus,” 
he  says.“I  had  thousands  of  plants  by  the 
time  I  was  in  high  school.” 


Lynch  recalls  with  perfect  clarity  his 
wine  epiphany,  that  magical  moment 
when  he  realized  wine  could  be  some¬ 
thing  special.  In  1973,  he  was  talking  to  his 
neighbor,  a  maitre  d’  at  a  local  restaurant. 
Lynch  offered  him  a  drink  of  the  wine  he 
had  in  his  fridge.“I  think  it  was  Mateus,”  he 
says,  referring  to  a  popular,  and  inexpen¬ 
sive,  1970s  imported  rose. 

His  neighbor  responded  by  uncorking 
a  bottle  of  Lafite  Rothschild,  one  of  the 
most  illustrious  names  in  French 
Bordeaux.“I  took  a  sip  of  that:  Holy 
Cow!”  Lynch  recalls,  an  almost  reveren¬ 
tial  hush  in  his  voice. That  bottle  was 
about  $100,  at  a  time  when  “good  wine 
in  America  was  $3,”  he  says.  By  compari¬ 
son,  a  bottle  by  the  same  vintner  from 
the  grape  harvest  in  the  year  of  Lynch’s 
epiphany  was  recently  auctioned  off  at 
winecommune.com  for  $800. 

“That’s  when  I  knew  there  is  a  reason  to 
be  rich:  to  buy  this  kind  of  wine  and  not 
worry  about  the  price,”  Lynch  says.  When 
he  sold  Interop  to  Ziff-Davis  “for  a  ridicu¬ 
lous  amount  of  mone^’  he  went  to  the 
local  liquor  store,  ordered  a  quarter  of  a 
million  dollars  worth  of  French  wine,  and 
had  a  wine  cellar  built  in  his  home.  By  the 
early  ’90s  he  wanted  to  do  more  and 
bought  land  in  Napa  and  planted  vines. 

In  general,  none  of  these  winemakers 
has  introduced  high  technology  into  the 
grape-growing  and  wine-making  parts  of 
this  business.The  intuitive  nature  of  wine 
making  —  judging  when  the  grapes  are 
ready,  how  long  they  should  be  cold 
soaked  right  after  being  crushed,  the  sub¬ 
tleties  of  blending  and  aging  wine  —  is 
part  of  its  appeal  for  these  men. 

“When  we  craft  our  wines,  when  we 
grow  them,  when  we  decided  whether  to 
add  water  to  the  soil,  do  the  leaf  pulling 
and  so  on,  we’re  always  asking, ‘How  will 
this  affect  the  mouth  feel,  or  the  flavor  pro¬ 
file  of  the  finished  wine?’”  Halleck  says. 


Bressler  has  used  his  background  in  the 
Internet  to  help  wineries  market,  sell  and 
most  recently  ship  wine.Tve  been  work¬ 
ing  with  companies  that  take  wine  orders 
and  ship  wine,  to  get  them  connected  via 
XML,”  he  says.  One  goal  has  been  to  make 
the  shipment’s  tracking  number  available 
to  wine  buyers. 

He’s  also  tracking  the  evolving  wireless 
sensor  technologies  as  a  way  to  collect 
and  relay  data  such  as  moisture  content 
in  the  soil  or  in  the  vines.  Other  interests 
are  ultra  wideband,  for  blanketing  a  vine¬ 
yard  with  a  wireless  network,  and  radio 
frequency  identification  (RFID)  tags.“In  a 
big  winery  you  have  hundreds  of  barrels 
and  you’re  constantly  moving  them,”  he 
says.“Barrels  get  lost.  RFID  tags  would  be  a 
huge  help  in  that.” 

There  is  little  enthusiasm  for  turning  their 
businesses  into  bleeding-edge  technology 
showpieces.That’s  partly  because  they 
savor  the  rhythm  of  ripening  grapes,  of  fer¬ 
menting  the  wine  and  aging  it.They  savor 
the  realization  that  time  is  an  ally  in  their 
vocation,  not  as  in  Silicon  Valley  an  enemy 

“In  Silicon  Valley  everything  is  about 
speed.The  entire  valley  runs  on  adrena¬ 
line  and  hypertime,”  McMinn  says.“In 
Napa,  from  the  time  you  plant  a  grapevine 
to  the  time  you  sell  the  first  bottle  of  wine 
from  that  vine  it’s  seven  years.  Here,  you 
don’t  control  the  time.  No  matter  what  you 
do, you  only  get  one  crop  per  year.”* 


Got  great  ideas 


■  Got  a  suggestion  fop  a  Wider  Net 
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we  should  profile?  Contact  Bob  Brown 
with  your  ideas  at  bbrown@nww.com. 


BackSpin  Mark  Gibbs 


NetworkWorld 


1/24/05 


www.nwfusion.com 


The  IT  Big  One:  Just  a  matter  of  time 


There  are  bad  times  just  around  the 
corner. 

There  are  dark  clouds  hurtling 
through  the  sky. 

And  it’s  no  use  whining  about  a  sil¬ 
ver  lining, 

For  we  KNOW  from  experience  that 
they  won ’t  roll  by. 

—  From  “There  are  bad  times  just  around  the  cor¬ 
ner”  by  Noel  Coward. 

The  recent  tsunami  tragedy  should  make  us  all 
realize  that  no  matter  how  unlikely  a  catastrophe 
might  seem,  the  potential  exists. 

Ask  any  large  company  about  its  disaster-readiness 
and  recovery  plans  and  you’ll  hear  about  multiple 
data  centers, standby  generators,  and  on  and  on.  But 
are  they  really  prepared  for  the  Big  One? 

In  the  face  of  a  real,  mega-scale,  global  online  dis¬ 
aster  could  they  keep  working?  Could  any  of  us? 
Could  we  really  do  much  at  all  if  the  Big  One  hits?  I 
suspect  we’re  all  fooling  ourselves  about  what  we 
really  could  do. 

The  problem  is  the  large-scale  network  disasters 
we’ve  seen  so  far  have  been  limited  in  scope  and 
fixed  in  a  few  days.  Most  of  our  big  catastrophes, 
which  have  been  caused  by  worms  and  viruses, 
have  in  reality  caused  less  financial  and  opera¬ 


tional  problems  than  spam  and  spyware. 

The  Big  One,  the  mother  of  all  cyberdisasters,  will 
affect  more  machines  in  more  organizations  in  more 
countries  than  any  disaster  we’ve  seen.  Its  effects  will 
be  lasting,  and  its  economic  impact  dreadful. 

You  might  disagree  about  calling  today’s  spam  and 
spyware  problems  catastrophes.  What  makes  people 
think  of  them  as  mere  problems  is  they  crept  up  on 
us  slowly  But  when  you  consider  the  billions  of  dol¬ 
lars  in  lost  productivity  corrupted  data  and  support 
costs,  it’s  hard  to  not  call  these  disasters. 

This  could  be  the  pattern  of  some  future  disasters: 
a  slow  buildup  that  culminates  in  a  really  expensive, 
permanent  degradation  of  how  our  systems  work.  We 
are  much  like  the  proverbial  frog  in  a  pot  that  sits  still 
and  gets  boiled  to  death  because  the  water  is  heated 
gradually 

Alternatively  the  Big  One  could  hit  us  really 
quickly  I  recently  read  in  Network  World  that  Mikko 
Hypponen,  director  of  anti-virus  research  at  F-Secure, 
suggests  that  “Uncrackable  viruses  . . .  could  be  on 
the  horizon.  Authorities  put  up  their  best  numbers 
yet  in  2004  with  respect  to  arresting  virus  writers,  but 
unfortunately  the  people  they’re  catching  are  hobby¬ 
ists  and  teenagers  ...  the  biggest  threats  come  from 
professionals  who  are  beefing  up  their  arsenals”  (see 
www.nwfusion.com,  DocFinder:  5445). 

And  that’s  the  least  of  it.  What  if  an  uncrackable 


virus  targets  spyware  as  a  delivery  and  transmission 
vector? 

Or  what  about  a  zero-day  exploit  built  into  a  virus 
or  worm  that  infects,  say  Windows  operating  systems? 
It  would  be  great  to  believe  that  such  a  combination 
couldn’t  exist,  but  that  wouldn’t  be  a  smart  bet  given 
the  history  of  the  security  problems  of  commercial 
products  and  their  increasing  complexity 

In  such  a  scenario,  we  could  find  that  within  a  few 
hours  most  consumer  PCs  would  be  disabled  and 
most  of  our  outward-facing  servers  would  collapse. 
Next  the  problem  would  spread  to  our  internal 
servers  and  desktops  and  laptops. 

Thud.  E-commerce  is  history  the  online  economy  is 
gasping  for  air,  and  corporate  IT  groups  worldwide 
have  retired  to  the  nearest  bar  to  get  wasted. 

A  dull, sullen  silence  would  settle  over  the  Internet 
disturbed  only  by  the  scratchings  of  technology  col¬ 
umnists  as  they  labor  into  the  night  on  smug  op-ed 
pieces  claiming  “we  told  you  so.” 

It  won’t  surprise  you  that  I  don’t  have  any  answers 
and  I  have  yet  to  talk  to  anyone  who  has,  other  than 
those  who  say  such  a  scenario  is  highly  unlikely. 
Which  is  exactly  my  point:  It  might  be  unlikely  but  it 
is  not  impossible.  What  can  we  do? 

Are  bad  times  around  the  corner?  Your  chorus  to 
back  spin  @gibbs.  com. 
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News,  insights,  opinions  and  oddities 


By  Paul  McNamara 

Everyone  has  an  opinion 

Let's  dip  into  the  mailbag  once  again 
—  it’s  been  too  long. 

A  column  scoffing  at  IBM's  contention  that  "40%  of  all  computer  users  use  the 
word  ‘password’  as  their  password”  prompted  many  of  you  to  offer  your  own 
scoffs  —  and  a  few  to  rise  to  IBM’s  defense. 

“Thanks  for  calling  IBM  on  their  ‘40%  use  password’  contention,”  writes  Ben¬ 
jamin  Vogel.  “It  is  dumb,  unfounded  statements  like  this  that  make  it  into  the  pub¬ 
lic  psyche —  I  think  everyone  agrees  that  we  need  to  take  security  seriously.The 
way  to  make  us  secure  is  not  to  make  stuff  up  —  which  seems  to  be  something 
large  security  companies  are  fond  of  doing." 

Another  reader  says  any  such  40%  cannot  include  his  co-workers. 

“In  our  organization  this  would  be  impossible  because  we  have  minimum  pass¬ 
word  complexity  algorithms  in  place,”  writes  Don  Anderson.  “We  require  pass¬ 
words  to  have  three  of  the  following  four  elements:  upper  case,  lower  case,  num¬ 
bers  and  symbols.” 

As  for  those  backing  Big  Blue: 

"My  experience  says  that  40%  is  low  —  try  60%, "  says  Lou  Yovin. 

Another  needing  no  convincing  asked  that  his  name  not  be  used. 

“IBM's  40%  figure  for  ‘password’  as  passwords  doesn’t  surprise  me,"  says  this 
fellow.  "Our  company  is  highly  decentralized  with  IT  handled  at  each  of  60-plus 
sites  except  for  a  few  corporate  policies.  Of  course,  the  latest  thing  in  corporate 
policy  is  Sarbanes-Oxley,  and  a  co-worker  who  helped  audit  four  sites  says  two 
of  them  used  ‘password.’  Another  one  I  helped  on  was  the  same.  Obviously, 
Sarbanes-Oxley  may  be  whittling  away  at  IBM’s  statistic,  but  eliminate  publicly 
traded  companies  and  I'll  bet  the  percentage  is  still  pretty  huge." 

My  spirited  defense  of  Internet  vote-swapping  schemes  drew  much  criticism. 

“Your  article  seems  to  suggest  that  this  practice  of  vote  swapping  is  morally 


upright  regardless  of  the  legality,"  writes  Charlie  Bruce. 

I  didn’t  mean  to  suggest  any  such  thing;  my  intent  was  to  state  that  position 
unequivocally. 

“Do  you  spin  back  your  odometer  too?"  Bruce  continues. 

No,  that  would  be  illegal . . .  and  I  can  barely  put  gas  in  a  car,  never  mind  monkey 
with  the  innards. 

The  flak  generated  by  that  column  included  the  usual  chorus  of  "keep  politics 
out  of  Network  World"  complaints,  so  I  penned  another  piece  explaining  why  we 
ignore  such  gripes.  Much  to  my  everlasting  appreciation,  a  significant  number  of 
readers  offered  their  applause. 

“It  doesn’t  matter  if  I  agree  or  disagree  with  you  on  a  given  issue.  1  enjoy  read¬ 
ing  your  column  —  even  the  politically  colored  ones,"  writes  Howard  Stewart. 

"As  for  those  readers  who  complain  about  the  content,  were  they  chained  to  a 
chair  and  forced  to  read?  ‘News,  insights,  opinions  and  oddities’  [as  seen  in  the 
column  logo  above]  explains  it  all  quite  well.” 

A  like-minded  soul  sees  the  issue  in  patriotic  terms. 

“You  have  the  right  to  print  what  you  want.The  readers  have  the  right  to  read  it 
or  not,  and  the  advertisers  can  continue  to  buy  space  or  not,"  offers  Jerry  White. 
"For  all  those  who  complained,  how  many  didn’t?  Let  the  market  figure  it  out. 
Those  who  are  offended  can  walk,  and  the  rest  of  us  can  stick  around  for  the  next 
network-based  political  morsel.  God  bless  the  First  Amendment.” 

Finally,  a  cautionary  tale  about  promiscuous  e-mail  practices  that  focused  on  a 
public  posting  of  1.5  million  messages  between  176  former  Enron  employees  and 
their  correspondents  piqued  the  curiosity  of  a  few  readers. 

“I  loved  your  article,  and  it  left  me  wanting  more,”  writes  James  Wilson.  “I  don’t 
know  about  the  rest  of  your  readers  but  I  would  like  to  rummage  through  those 
Enron  e-mails  myself.  Any  chance  you  could  point  me  in  the  right  direction?” 

Glad  to  help:Try  www.nwfusion.com,  DocFinder:  5436. 

Send  more.  The  address  is  buzz@nww.com. 
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NetVanra  1224STR 


NetVanta  1224STR 
The  functionality  of  five 
devices  for  the  price  of  one. 


(that  looks 


itch). 


Introducing  the  NetVanta  1224STR  from  ADTRAftT. 


Dare  to  Compare! 

NetVanta 

1224STR 

Managed,  24-Port 

✓ 

Layer  2  Switch 

IP  Access  Router 

Stateful  Inspection  Firewall 

% 

DSU/CSU 

✓ 

Gigabit  Ethernet  Uplinks 

QoS 

✓ 

VLAN  trunking 

✓ 

Stacking 

✓ 

Command  Line  interface  (CLI) 

✓ 

Intuitive  Web  GUI 

✓ 

ADTRAN  OS 

j/ 

Optional  Virtual  Private 
Networking 

✓ 

Optional  Dial  Backup 

✓ 

Optional  PBX  Connectivity 

✓ 

Unlimited  Telephone 

✓ 

Technical  Support 

Free  Firmware  Updates 

✓ 

5-Year  Warranty 

✓ 

Available  at  a  price  point  well  below  competing 
multi-box  solutions,  the  NetVanta  1224STR 
will  change  the  way  you  connect  remote  locations. 


The  NetVanta  Series 


Lower  the  cost  of  enterprise  connectivity  with  the  powerful  new 
NetVanta  1224STR.This  full-function  WAN/LAN  access  platform 
does  the  work  of five  devices  for  the  price  of  one.  Suitable  for  networks 
of  any  size,  the  NetVanta  1224STR  offers  everything  you  need  to  bring 
a  branch  office  or  remote  location  online,  including  managed  Layer  2 
Ethernet  switching,  full-featured  IP  routing,  firewall  protection,  VPN, 
and  WAN  termination — all  in  a  compact  1U  chassis.  It  is  QoS,  VLAN, 
and  Gigabit  Ethernet  capable,  and  offers  affordable  dial  backup  and 
voice  options.  ADTRAN’s  new  NetVanta  1 000  Series  is  backed  by  a 
100%  satisfaction  guarantee,  including  unlimited  technical  support, 
free  firmware  upgrades,  and  a  5-year  warranty. 


tree 


Register  to  win  a  free  NetVanta  1224STR  now! 


www.adtran.com/info/winnetvantal  224 


877.591.3055  Technical  Questions 
877.280.8416  Where  to  Buy 
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NetVanta  1000  Series 
Integrated  Switch-Router  Platforms 
Managed  Layer  2  Ethernet  Switches 


NetVanta  2000  Series 
Firewalls/VPN 


NetVanta  3000  Series 
IP  Routers 
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The  Network  Access  Company 


Copyright©  2004  ADTRAN,  Inc  All  rights  reserved.  ADTRAN  and  NetVanta  are  registered  trademarks  of  ADTRAN,  Inc 
Five  year  warranty  applies  in  North  America  and  Europe.  EN70D092704NW 


What’s  the  power  behind 
the  server  platform  of  choice? 
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64-bit  IntePXeorf  processors.  In  business,  you’ll  find  more 
servers  powered  by  the  Intel  Xeon  platform  than  any  other. 

For  some  very  powerful  reasons:  Today’s  Intel  Xeon 
platform  is  engineered  for  power  savings,  high  flexibility  and 
high  performance.  Mow  supporting  both  32-  and  64-bit  applications, 
the  Intel  Xeon  processor  can  do  amazing  things  for  your  business,  too. 

Get  the  powerful  details  at  intel.com/go/xeon. 


Support  for 
32-  and  64-bit 
applications 


Improved 

power-saving 

options 


Flexible  memory, 
I/O  and  storage 
configurations 


©•2005  intel  Corporation.  Intel,  Intel  Inside,  the  Intel  Inside  logo,  and  Intel  Xeon  are  trademarks  or  registered  trademarks  of  Intel  Corporation  or  its  subsidiaries  in  the  United  States  and  other  countries.  All  rights  reserved- 


